fix: workaround for long certificate lifetimes

dervoeti · dervoeti · commit cabe783b31b3 · 2025-06-24T16:07:42.000+02:00
diff --git a/rust/operator-binary/src/restart_controller/pod.rs b/rust/operator-binary/src/restart_controller/pod.rs
@@ -174,6 +174,9 @@ async fn reconcile(pod: Arc<PartialObjectMeta<Pod>>, ctx: Arc<Ctx>) -> Result<Ac
         }
 
         Some(Ok(time_until_pod_expires)) => {
+            // Clamp the rescheduling delay to a maximum of 6 months to prevent `Action::requeue` from panicking
+            // This workaround can be removed once https://github.com/kube-rs/kube/issues/1772 is resolved
+            let time_until_pod_expires = time_until_pod_expires.min(Duration::from_secs(6 * 30 * 24 * 60 * 60));
             tracing::info!(
                 pod.expires_at = ?pod_expires_at,
                 recheck_delay = ?time_until_pod_expires,

Original file line number	Diff line number	Diff line change
`@@ -174,6 +174,9 @@ async fn reconcile(pod: Arc<PartialObjectMeta<Pod>>, ctx: Arc<Ctx>) -> Result<Ac`
`174`	`174`	`}`
`175`	`175`
`176`	`176`	`Some(Ok(time_until_pod_expires)) => {`
	`177`	+ // Clamp the rescheduling delay to a maximum of 6 months to prevent `Action::requeue` from panicking
	`178`	`+ // This workaround can be removed once https://github.com/kube-rs/kube/issues/1772 is resolved`
	`179`	`+ let time_until_pod_expires = time_until_pod_expires.min(Duration::from_secs(6 * 30 * 24 * 60 * 60));`
`177`	`180`	`tracing::info!(`
`178`	`181`	`pod.expires_at = ?pod_expires_at,`
`179`	`182`	`recheck_delay = ?time_until_pod_expires,`