How to recreate configMap

[mengkai514]

What happened:
After I accidentally deleted the configMap, I was unable to rebuild the configMap even after recreating the operator pod or helm rollback.

And the operator pod logs：

{"level":"info","ts":1755006435.5498862,"logger":"controller.cdi-operator-controller","msg":"Starting EventSource","source":"kind source: *v1beta1.CDI"}
{"level":"info","ts":1755006435.5499628,"logger":"controller.cdi-operator-controller","msg":"Starting Controller"}
{"level":"info","ts":1755006435.6503656,"logger":"controller.cdi-operator-controller","msg":"Starting workers","worker count":1}
{"level":"info","ts":1755006435.6504521,"logger":"cdi-operator","msg":"Reconciling CDI","Request.Namespace":"","Request.Name":"cdi"}
{"level":"error","ts":1755006435.8644702,"logger":"cdi-operator","msg":"error getting apiserver ca bundle","error":"ConfigMap "cdi-apiserver-signer-bundle" not found","stacktrace":"kubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.getAPIServerCABundle\n\tpkg/operator/resources/cluster/apiserver.go:553\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createAPIService\n\tpkg/operator/resources/cluster/apiserver.go:186\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createDynamicAPIServerResources\n\tpkg/operator/resources/cluster/apiserver.go:51\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createResourceGroup\n\tpkg/operator/resources/cluster/factory.go:102\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createAllResources\n\tpkg/operator/resources/cluster/factory.go:88\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.CreateAllDynamicResources\n\tpkg/operator/resources/cluster/factory.go:77\nkubevirt.io/containerized-data-importer/pkg/operator/controller.(*ReconcileCDI).GetAllResources\n\tpkg/operator/controller/cr-manager.go:136\nkubevirt.io/containerized-data-importer/vendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler.(*Reconciler).WatchDependantResources\n\tvendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler/reconciler.go:433\nkubevirt.io/containerized-data-importer/vendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler.(*Reconciler).Reconcile\n\tvendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler/reconciler.go:129\nkubevirt.io/containerized-data-importer/pkg/operator/controller.(*ReconcileCDI).Reconcile\n\tpkg/operator/controller/controller.go:236\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:114\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:311\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"}
{"level":"error","ts":1755006435.864649,"logger":"cdi-operator","msg":"error getting apiserver ca bundle","error":"ConfigMap "cdi-apiserver-signer-bundle" not found","stacktrace":"kubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.getAPIServerCABundle\n\tpkg/operator/resources/cluster/apiserver.go:553\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createAPIService\n\tpkg/operator/resources/cluster/apiserver.go:186\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createDynamicAPIServerResources\n\tpkg/operator/resources/cluster/apiserver.go:52\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createResourceGroup\n\tpkg/operator/resources/cluster/factory.go:102\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createAllResources\n\tpkg/operator/resources/cluster/factory.go:88\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.CreateAllDynamicResources\n\tpkg/operator/resources/cluster/factory.go:77\nkubevirt.io/containerized-data-importer/pkg/operator/controller.(*ReconcileCDI).GetAllResources\n\tpkg/operator/controller/cr-manager.go:136\nkubevirt.io/containerized-data-importer/vendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler.(*Reconciler).WatchDependantResources\n\tvendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler/reconciler.go:433\nkubevirt.io/containerized-data-importer/vendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler.(*Reconciler).Reconcile\n\tvendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler/reconciler.go:129\nkubevirt.io/containerized-data-importer/pkg/operator/controller.(*ReconcileCDI).Reconcile\n\tpkg/operator/controller/controller.go:236\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:114\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:311\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"}

What you expected to happen:
Rebuild the operator pod and recreate the configMap.

How to reproduce it (as minimally and precisely as possible):
Steps to reproduce the behavior.

Additional context:
Add any other context about the problem here.

Environment:

• CDI version (use kubectl get deployments cdi-deployment -o yaml): N/A
• Kubernetes version (use kubectl version): N/A
• DV specification: N/A
• Cloud provider or hardware configuration: N/A
• OS (e.g. from /etc/os-release): N/A
• Kernel (e.g. uname -a): N/A
• Install tools: N/A
• Others: N/A

[awels]

The CDI operator should re-create it. If it is not look in the operator logs to see if there is an error there.

[mengkai514]

The CDI operator should re-create it. If it is not look in the operator logs to see if there is an error there.

What is Orphan object? The logs:

{"level":"error","ts":1755008018.5158198,"logger":"cdi-operator","msg":"error getting apiserver ca bundle","error":"ConfigMap "cdi-apiserver-signer-bundle" not found","stacktrace":"kubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.getAPIServerCABundle\n\tpkg/operator/resources/cluster/apiserver.go:553\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createDataImportCronValidatingWebhook\n\tpkg/operator/resources/cluster/apiserver.go:255\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createDynamicAPIServerResources\n\tpkg/operator/resources/cluster/apiserver.go:57\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createResourceGroup\n\tpkg/operator/resources/cluster/factory.go:102\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.createAllResources\n\tpkg/operator/resources/cluster/factory.go:88\nkubevirt.io/containerized-data-importer/pkg/operator/resources/cluster.CreateAllDynamicResources\n\tpkg/operator/resources/cluster/factory.go:77\nkubevirt.io/containerized-data-importer/pkg/operator/controller.(*ReconcileCDI).GetAllResources\n\tpkg/operator/controller/cr-manager.go:136\nkubevirt.io/containerized-data-importer/vendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler.(*Reconciler).CheckForOrphans\n\tvendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler/reconciler.go:363\nkubevirt.io/containerized-data-importer/vendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler.(*Reconciler).Reconcile\n\tvendor/kubevirt.io/controller-lifecycle-operator-sdk/pkg/sdk/reconciler/reconciler.go:152\nkubevirt.io/containerized-data-importer/pkg/operator/controller.(*ReconcileCDI).Reconcile\n\tpkg/operator/controller/controller.go:236\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:114\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:311\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266\nkubevirt.io/containerized-data-importer/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\tvendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":1755008018.5158732,"logger":"cdi-operator","msg":"Orphan object exists","Request.Namespace":"","Request.Name":"cdi","obj":{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","name":"cdi.kubevirt.io:admin"}}

[awels]

That means it is finding another configmap or secret that is not owned by the CR.

[mengkai514]

That means it is finding another configmap or secret that is not owned by the CR.

But I have deleted the secret and configmap under the cdi namespace

[mengkai514]

@awels The configmap will be rebuilt only if there is no error in the operator log. However, the operator log now reports an error about no configmap, which is a loop.

[awels]

It only gets to that error if it thinks that it shouldn't create the config map. I would have to check the exact things we look for in the code.

[mengkai514]

It only gets to that error if it thinks that it shouldn't create the config map. I would have to check the exact things we look for in the code.

This method seems to create the configmap, but the operator does not seem to call this method yet：

func (r *ReconcileCDI) registerHooks() {
r.reconciler.
WithPreCreateHook(r.preCreate).
WithWatchRegistrator(r.watch).
WithSanityChecker(r.checkSanity).
WithPerishablesSynchronizer(r.sync)
}

[mengkai514]

@awels Is there a way to rebuild? If I reinstall, will the existing Data Volume be deleted?

[awels]

I haven't had a chance to look at the code, but last time I tried, I just deleted all the configmaps and secrets in the cdi namespace, and it rebuild everything.