fix: workaround for long certificate lifetimes (#363)

Author: dervoeti

CHANGELOG.md

@@ -20,6 +20,7 @@ All notable changes to this project will be documented in this file.
     by `FILE_LOG_DIRECTORY` (or via `--file-log-directory <DIRECTORY>`).
   - Replace stackable-operator `print_startup_string` with `tracing::info!` with fields.
 - Version CRDs and bump dependencies ([#353]).
+- Limit rescheduling delay to a maximum of 6 months ([#363]).
 
 ### Fixed
 
@@ -30,6 +31,7 @@ All notable changes to this project will be documented in this file.
 [#344]: https://github.com/stackabletech/commons-operator/pull/344
 [#349]: https://github.com/stackabletech/commons-operator/pull/349
 [#353]: https://github.com/stackabletech/commons-operator/pull/353
+[#363]: https://github.com/stackabletech/commons-operator/pull/363
 
 ## [25.3.0] - 2025-03-21
 

rust/operator-binary/src/restart_controller/pod.rs

@@ -174,6 +174,10 @@ async fn reconcile(pod: Arc<PartialObjectMeta<Pod>>, ctx: Arc<Ctx>) -> Result<Ac
         }
 
         Some(Ok(time_until_pod_expires)) => {
+            // Clamp the rescheduling delay to a maximum of 6 months to prevent `Action::requeue` from panicking
+            // This workaround can be removed once https://github.com/kube-rs/kube/issues/1772 is resolved
+            let time_until_pod_expires =
+                time_until_pod_expires.min(Duration::from_secs(6 * 30 * 24 * 60 * 60));
             tracing::info!(
                 pod.expires_at = ?pod_expires_at,
                 recheck_delay = ?time_until_pod_expires,