mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 22:13:18 +09:00
Backport of #3887 to release-1.6. The fix reached main only, so every 1.6 release still ships the Job as a post-install/post-upgrade hook and hits the deadlock #3875 describes: the chart upgrade waits for MachineDeployment and the child HelmReleases, workers cannot register without the bootstrap-token Secret, and the hook that creates that Secret only runs once the wait has already succeeded. The wait cannot succeed without nodes, so the upgrade times out and Flux retries the same cycle indefinitely.
This is deterministic rather than flaky, and it takes out every tenant Kubernetes cluster on the platform at once. Anyone reading the tracker finds #3875 closed, upgrades to 1.6.4 expecting the fix, and lands in the same state, which is why this backport matters more than the usual one.
(cherry picked from commit adc9c568fd)
Assisted-by: LLM
Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>