/* Copyright 2016 The Kubernetes Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package apimachinery import ( "context" "encoding/json" "fmt" "sync/atomic" "time" appsv1 "k8s.io/api/apps/v1" batchv1 "k8s.io/api/batch/v1" v1 "k8s.io/api/core/v1" apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1" apiextensionsclientset "k8s.io/apiextensions-apiserver/pkg/client/clientset/clientset" apiextensionstestserver "k8s.io/apiextensions-apiserver/test/integration/fixtures" apierrors "k8s.io/apimachinery/pkg/api/errors" metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" "k8s.io/apimachinery/pkg/apis/meta/v1/unstructured" "k8s.io/apimachinery/pkg/runtime/schema" "k8s.io/apimachinery/pkg/types" utilerrors "k8s.io/apimachinery/pkg/util/errors" "k8s.io/apimachinery/pkg/util/wait" "k8s.io/apiserver/pkg/storage/names" clientset "k8s.io/client-go/kubernetes" clientv1 "k8s.io/client-go/kubernetes/typed/core/v1" "k8s.io/kubernetes/test/e2e/framework" e2edeployment "k8s.io/kubernetes/test/e2e/framework/deployment" e2emetrics "k8s.io/kubernetes/test/e2e/framework/metrics" e2enode "k8s.io/kubernetes/test/e2e/framework/node" e2epod "k8s.io/kubernetes/test/e2e/framework/pod" imageutils "k8s.io/kubernetes/test/utils/image" admissionapi "k8s.io/pod-security-admission/api" "github.com/onsi/ginkgo/v2" "github.com/onsi/gomega" ) // estimateMaximumPods estimates how many pods the cluster can handle // with some wiggle room, to prevent pods being unable to schedule due // to max pod constraints. func estimateMaximumPods(ctx context.Context, c clientset.Interface, min, max int32) int32 { nodes, err := e2enode.GetReadySchedulableNodes(ctx, c) framework.ExpectNoError(err) availablePods := int32(0) for _, node := range nodes.Items { if q, ok := node.Status.Allocatable["pods"]; ok { if num, ok := q.AsInt64(); ok { availablePods += int32(num) continue } } // best guess per node, since default maxPerCore is 10 and most nodes have at least // one core. availablePods += 10 } //avoid creating exactly max pods availablePods = int32(float32(availablePods) * 0.5) // bound the top and bottom if availablePods > max { availablePods = max } if availablePods < min { availablePods = min } return availablePods } func getForegroundOptions() metav1.DeleteOptions { policy := metav1.DeletePropagationForeground return metav1.DeleteOptions{PropagationPolicy: &policy} } func getBackgroundOptions() metav1.DeleteOptions { policy := metav1.DeletePropagationBackground return metav1.DeleteOptions{PropagationPolicy: &policy} } func getOrphanOptions() metav1.DeleteOptions { policy := metav1.DeletePropagationOrphan return metav1.DeleteOptions{PropagationPolicy: &policy} } var ( zero = int64(0) lablecount = int64(0) ) const ( // The GC controller periodically rediscovers available APIs and syncs running informers for those resources. // If previously available APIs are removed during that resync process, the sync process can fail and need to be retried. // // During e2e runs, parallel tests add/remove API resources (by creating/deleting CRDs and aggregated APIs), // which makes it likely GC will need to retry informer resync at some point during an e2e run. // // This timeout covers two resync/retry periods, and should be added to wait timeouts to account for delays // to the GC controller caused by API changes in other tests. gcInformerResyncRetryTimeout = time.Minute // Many operations in these tests are per-replica and may require 100 mutating requests. The // default client QPS of a controller is 5. If the qps is saturated, it will take 20s complete // 100 requests. The e2e tests are running in parallel, so a controller might be stuck // processing other tests. replicaSyncTimeout = 2 * time.Minute ) func getPodTemplateSpec(labels map[string]string) v1.PodTemplateSpec { return v1.PodTemplateSpec{ ObjectMeta: metav1.ObjectMeta{ Labels: labels, }, Spec: v1.PodSpec{ TerminationGracePeriodSeconds: &zero, Containers: []v1.Container{ { Name: "nginx", Image: imageutils.GetE2EImage(imageutils.Nginx), }, }, }, } } func newOwnerDeployment(f *framework.Framework, deploymentName string, labels map[string]string) *appsv1.Deployment { return e2edeployment.NewDeployment(deploymentName, 2, labels, "nginx", imageutils.GetE2EImage(imageutils.Nginx), appsv1.RollingUpdateDeploymentStrategyType) } func newOwnerRC(f *framework.Framework, name string, replicas int32, labels map[string]string) *v1.ReplicationController { template := getPodTemplateSpec(labels) return &v1.ReplicationController{ TypeMeta: metav1.TypeMeta{ Kind: "ReplicationController", APIVersion: "v1", }, ObjectMeta: metav1.ObjectMeta{ Namespace: f.Namespace.Name, Name: name, }, Spec: v1.ReplicationControllerSpec{ Replicas: &replicas, Selector: labels, Template: &template, }, } } func newGCPod(name string) *v1.Pod { return &v1.Pod{ TypeMeta: metav1.TypeMeta{ Kind: "Pod", APIVersion: "v1", }, ObjectMeta: metav1.ObjectMeta{ Name: name, }, Spec: v1.PodSpec{ TerminationGracePeriodSeconds: new(int64), Containers: []v1.Container{ { Name: "nginx", Image: imageutils.GetE2EImage(imageutils.Nginx), }, }, }, } } // verifyRemainingObjects verifies if the number of remaining objects. // It returns error if the communication with the API server fails. func verifyRemainingObjects(ctx context.Context, f *framework.Framework, objects map[string]int) (bool, error) { var ret = true for object, num := range objects { switch object { case "Pods": pods, err := f.ClientSet.CoreV1().Pods(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list pods: %w", err) } if len(pods.Items) != num { ret = false ginkgo.By(fmt.Sprintf("expected %d pods, got %d pods", num, len(pods.Items))) } case "Deployments": deployments, err := f.ClientSet.AppsV1().Deployments(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list deployments: %w", err) } if len(deployments.Items) != num { ret = false ginkgo.By(fmt.Sprintf("expected %d Deployments, got %d Deployments", num, len(deployments.Items))) } case "ReplicaSets": rs, err := f.ClientSet.AppsV1().ReplicaSets(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list rs: %w", err) } if len(rs.Items) != num { ret = false ginkgo.By(fmt.Sprintf("expected %d rs, got %d rs", num, len(rs.Items))) } case "ReplicationControllers": rcs, err := f.ClientSet.CoreV1().ReplicationControllers(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list replication controllers: %w", err) } if len(rcs.Items) != num { ret = false ginkgo.By(fmt.Sprintf("expected %d RCs, got %d RCs", num, len(rcs.Items))) } case "CronJobs": cronJobs, err := f.ClientSet.BatchV1().CronJobs(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list cronjobs: %w", err) } if len(cronJobs.Items) != num { ret = false ginkgo.By(fmt.Sprintf("expected %d cronjobs, got %d cronjobs", num, len(cronJobs.Items))) } case "Jobs": jobs, err := f.ClientSet.BatchV1().Jobs(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list jobs: %w", err) } if len(jobs.Items) != num { ret = false ginkgo.By(fmt.Sprintf("expected %d jobs, got %d jobs", num, len(jobs.Items))) } default: return false, fmt.Errorf("object %s is not supported", object) } } return ret, nil } func gatherMetrics(ctx context.Context, f *framework.Framework) { ginkgo.By("Gathering metrics") var summary framework.TestDataSummary grabber, err := e2emetrics.NewMetricsGrabber(ctx, f.ClientSet, f.KubemarkExternalClusterClientSet, f.ClientConfig(), false, false, true, false, false, false) if err != nil { framework.Logf("Failed to create MetricsGrabber. Skipping metrics gathering.") } else { received, err := grabber.Grab(ctx) if err != nil { framework.Logf("MetricsGrabber failed grab metrics. Skipping metrics gathering.") } else { summary = (*e2emetrics.ComponentCollection)(&received) framework.Logf(summary.PrintHumanReadable()) } } } func newCronJob(name, schedule string) *batchv1.CronJob { parallelism := int32(1) completions := int32(1) return &batchv1.CronJob{ ObjectMeta: metav1.ObjectMeta{ Name: name, }, TypeMeta: metav1.TypeMeta{ Kind: "CronJob", }, Spec: batchv1.CronJobSpec{ Schedule: schedule, JobTemplate: batchv1.JobTemplateSpec{ Spec: batchv1.JobSpec{ Parallelism: ¶llelism, Completions: &completions, Template: v1.PodTemplateSpec{ Spec: v1.PodSpec{ RestartPolicy: v1.RestartPolicyOnFailure, TerminationGracePeriodSeconds: &zero, Containers: []v1.Container{ { Name: "c", Image: imageutils.GetE2EImage(imageutils.BusyBox), Command: []string{"sleep", "300"}, }, }, }, }, }, }, }, } } // getUniqLabel returns a UniqLabel based on labeLkey and labelvalue. func getUniqLabel(labelkey, labelvalue string) map[string]string { count := atomic.AddInt64(&lablecount, 1) uniqlabelkey := fmt.Sprintf("%s-%05d", labelkey, count) uniqlabelvalue := fmt.Sprintf("%s-%05d", labelvalue, count) return map[string]string{uniqlabelkey: uniqlabelvalue} } var _ = SIGDescribe("Garbage collector", func() { f := framework.NewDefaultFramework("gc") f.NamespacePodSecurityLevel = admissionapi.LevelBaseline /* Release: v1.9 Testname: Garbage Collector, delete replication controller, propagation policy background Description: Create a replication controller with 2 Pods. Once RC is created and the first Pod is created, delete RC with deleteOptions.PropagationPolicy set to Background. Deleting the Replication Controller MUST cause pods created by that RC to be deleted. */ framework.ConformanceIt("should delete pods created by rc when not orphaning", func(ctx context.Context) { clientSet := f.ClientSet rcClient := clientSet.CoreV1().ReplicationControllers(f.Namespace.Name) podClient := clientSet.CoreV1().Pods(f.Namespace.Name) rcName := "simpletest.rc" uniqLabels := getUniqLabel("gctest", "delete_pods") rc := newOwnerRC(f, rcName, 2, uniqLabels) ginkgo.By("create the rc") rc, err := rcClient.Create(ctx, rc, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create replication controller: %v", err) } // wait for rc to create some pods if err := wait.Poll(5*time.Second, 30*time.Second, func() (bool, error) { pods, err := podClient.List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list pods: %w", err) } // We intentionally don't wait the number of pods to reach // rc.Spec.Replicas. We want to see if the garbage collector and the // rc manager work properly if the rc is deleted before it reaches // stasis. if len(pods.Items) > 0 { return true, nil } return false, nil }); err != nil { framework.Failf("failed to wait for the rc to create some pods: %v", err) } ginkgo.By("delete the rc") deleteOptions := getBackgroundOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(rc.UID)) if err := rcClient.Delete(ctx, rc.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the rc: %v", err) } ginkgo.By("wait for all pods to be garbage collected") // wait for the RCs and Pods to reach the expected numbers. if err := wait.PollWithContext(ctx, 5*time.Second, (60*time.Second)+gcInformerResyncRetryTimeout, func(ctx context.Context) (bool, error) { objects := map[string]int{"ReplicationControllers": 0, "Pods": 0} return verifyRemainingObjects(ctx, f, objects) }); err != nil { framework.Failf("failed to wait for all pods to be deleted: %v", err) remainingPods, err := podClient.List(ctx, metav1.ListOptions{}) if err != nil { framework.Failf("failed to list pods post mortem: %v", err) } else { framework.Failf("remaining pods are: %#v", remainingPods) } } gatherMetrics(ctx, f) }) /* Release: v1.9 Testname: Garbage Collector, delete replication controller, propagation policy orphan Description: Create a replication controller with maximum allocatable Pods between 10 and 100 replicas. Once RC is created and the all Pods are created, delete RC with deleteOptions.PropagationPolicy set to Orphan. Deleting the Replication Controller MUST cause pods created by that RC to be orphaned. */ framework.ConformanceIt("should orphan pods created by rc if delete options say so", func(ctx context.Context) { clientSet := f.ClientSet rcClient := clientSet.CoreV1().ReplicationControllers(f.Namespace.Name) podClient := clientSet.CoreV1().Pods(f.Namespace.Name) rcName := "simpletest.rc" uniqLabels := getUniqLabel("gctest", "orphan_pods") rc := newOwnerRC(f, rcName, estimateMaximumPods(ctx, clientSet, 10, 100), uniqLabels) ginkgo.By("create the rc") rc, err := rcClient.Create(ctx, rc, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create replication controller: %v", err) } // wait for rc to create pods waitForReplicas(ctx, rc, rcClient) ginkgo.By("delete the rc") deleteOptions := getOrphanOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(rc.UID)) if err := rcClient.Delete(ctx, rc.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the rc: %v", err) } ginkgo.By("wait for the rc to be deleted") // Orphaning the 100 pods takes 100 PATCH operations. The default qps of // a client is 5. If the qps is saturated, it will take 20s to orphan // the pods. However, apiserver takes hundreds of ms to finish one // PATCH, and the gc sends the patching in a single thread, so the // actual qps is less than 5. Also, the e2e tests are running in // parallel, the GC controller might get distracted by other tests. // According to the test logs, 120s is enough time. if err := wait.PollWithContext(ctx, 5*time.Second, 120*time.Second+gcInformerResyncRetryTimeout, func(ctx context.Context) (bool, error) { rcs, err := rcClient.List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list rcs: %w", err) } if len(rcs.Items) != 0 { return false, nil } return true, nil }); err != nil { framework.Failf("%v", err) } ginkgo.By("wait for 30 seconds to see if the garbage collector mistakenly deletes the pods") time.Sleep(30 * time.Second) pods, err := podClient.List(ctx, metav1.ListOptions{}) if err != nil { framework.Failf("Failed to list pods: %v", err) } if e, a := int(*(rc.Spec.Replicas)), len(pods.Items); e != a { framework.Failf("expect %d pods, got %d pods", e, a) } gatherMetrics(ctx, f) if err = e2epod.DeletePodsWithGracePeriod(ctx, clientSet, pods.Items, 0); err != nil { framework.Logf("WARNING: failed to delete pods: %v", err) } }) // deleteOptions.OrphanDependents is deprecated in 1.7 and preferred to use the PropagationPolicy. // Discussion is tracked under https://github.com/kubernetes/kubernetes/issues/65427 to promote for conformance in future. ginkgo.It("should orphan pods created by rc if deleteOptions.OrphanDependents is nil", func(ctx context.Context) { clientSet := f.ClientSet rcClient := clientSet.CoreV1().ReplicationControllers(f.Namespace.Name) podClient := clientSet.CoreV1().Pods(f.Namespace.Name) rcName := "simpletest.rc" uniqLabels := getUniqLabel("gctest", "orphan_pods_nil_option") rc := newOwnerRC(f, rcName, 2, uniqLabels) ginkgo.By("create the rc") rc, err := rcClient.Create(ctx, rc, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create replication controller: %v", err) } // wait for rc to create some pods waitForReplicas(ctx, rc, rcClient) ginkgo.By("delete the rc") deleteOptions := metav1.DeleteOptions{ Preconditions: metav1.NewUIDPreconditions(string(rc.UID)), } if err := rcClient.Delete(ctx, rc.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the rc: %v", err) } ginkgo.By("wait for 30 seconds to see if the garbage collector mistakenly deletes the pods") time.Sleep(30 * time.Second) pods, err := podClient.List(ctx, metav1.ListOptions{}) if err != nil { framework.Failf("Failed to list pods: %v", err) } if e, a := int(*(rc.Spec.Replicas)), len(pods.Items); e != a { framework.Failf("expect %d pods, got %d pods", e, a) } gatherMetrics(ctx, f) if err = e2epod.DeletePodsWithGracePeriod(ctx, clientSet, pods.Items, 0); err != nil { framework.Logf("WARNING: failed to delete pods: %v", err) } }) /* Release: v1.9 Testname: Garbage Collector, delete deployment, propagation policy background Description: Create a deployment with a replicaset. Once replicaset is created , delete the deployment with deleteOptions.PropagationPolicy set to Background. Deleting the deployment MUST delete the replicaset created by the deployment and also the Pods that belong to the deployments MUST be deleted. */ framework.ConformanceIt("should delete RS created by deployment when not orphaning", func(ctx context.Context) { clientSet := f.ClientSet deployClient := clientSet.AppsV1().Deployments(f.Namespace.Name) rsClient := clientSet.AppsV1().ReplicaSets(f.Namespace.Name) deploymentName := "simpletest.deployment" uniqLabels := getUniqLabel("gctest", "delete_rs") deployment := newOwnerDeployment(f, deploymentName, uniqLabels) ginkgo.By("create the deployment") createdDeployment, err := deployClient.Create(ctx, deployment, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create deployment: %v", err) } // wait for deployment to create some rs ginkgo.By("Wait for the Deployment to create new ReplicaSet") err = wait.PollUntilContextTimeout(ctx, 500*time.Millisecond, 1*time.Minute, true, func(ctx context.Context) (bool, error) { rsList, err := rsClient.List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list rs: %w", err) } return len(rsList.Items) > 0, nil }) if err != nil { framework.Failf("Failed to wait for the Deployment to create some ReplicaSet: %v", err) } ginkgo.By("delete the deployment") deleteOptions := getBackgroundOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(createdDeployment.UID)) if err := deployClient.Delete(ctx, deployment.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the deployment: %v", err) } ginkgo.By("wait for all rs to be garbage collected") err = wait.PollUntilContextTimeout(ctx, 500*time.Millisecond, 1*time.Minute+gcInformerResyncRetryTimeout, true, func(ctx context.Context) (bool, error) { objects := map[string]int{"Deployments": 0, "ReplicaSets": 0, "Pods": 0} return verifyRemainingObjects(ctx, f, objects) }) if err != nil { errList := make([]error, 0) errList = append(errList, err) remainingRSs, err := rsClient.List(ctx, metav1.ListOptions{}) if err != nil { errList = append(errList, fmt.Errorf("failed to list RSs post mortem: %w", err)) } else { errList = append(errList, fmt.Errorf("remaining rs are: %#v", remainingRSs)) } aggregatedError := utilerrors.NewAggregate(errList) framework.Failf("Failed to wait for all rs to be garbage collected: %v", aggregatedError) } gatherMetrics(ctx, f) }) /* Release: v1.9 Testname: Garbage Collector, delete deployment, propagation policy orphan Description: Create a deployment with a replicaset. Once replicaset is created , delete the deployment with deleteOptions.PropagationPolicy set to Orphan. Deleting the deployment MUST cause the replicaset created by the deployment to be orphaned, also the Pods created by the deployments MUST be orphaned. */ framework.ConformanceIt("should orphan RS created by deployment when deleteOptions.PropagationPolicy is Orphan", func(ctx context.Context) { clientSet := f.ClientSet deployClient := clientSet.AppsV1().Deployments(f.Namespace.Name) rsClient := clientSet.AppsV1().ReplicaSets(f.Namespace.Name) deploymentName := "simpletest.deployment" uniqLabels := getUniqLabel("gctest", "orphan_rs") deployment := newOwnerDeployment(f, deploymentName, uniqLabels) ginkgo.By("create the deployment") createdDeployment, err := deployClient.Create(ctx, deployment, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create deployment: %v", err) } // wait for deployment to create some rs ginkgo.By("Wait for the Deployment to create new ReplicaSet") var replicaset appsv1.ReplicaSet err = wait.PollUntilContextTimeout(ctx, 500*time.Millisecond, 1*time.Minute, true, func(ctx context.Context) (bool, error) { rsList, err := rsClient.List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list rs: %w", err) } if len(rsList.Items) > 0 { replicaset = rsList.Items[0] return true, nil } return false, nil }) if err != nil { framework.Failf("Failed to wait for the Deployment to create some ReplicaSet: %v", err) } desiredGeneration := replicaset.Generation if err := wait.PollUntilContextTimeout(ctx, 100*time.Millisecond, 60*time.Second, true, func(ctx context.Context) (bool, error) { newRS, err := clientSet.AppsV1().ReplicaSets(replicaset.Namespace).Get(ctx, replicaset.Name, metav1.GetOptions{}) if err != nil { return false, err } return newRS.Status.ObservedGeneration >= desiredGeneration && newRS.Status.Replicas == *replicaset.Spec.Replicas, nil }); err != nil { framework.Failf("failed to verify .Status.Replicas is equal to .Spec.Replicas for replicaset %q: %v", replicaset.Name, err) } ginkgo.By("delete the deployment") deleteOptions := getOrphanOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(createdDeployment.UID)) if err := deployClient.Delete(ctx, deployment.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the deployment: %v", err) } ginkgo.By("wait for deployment deletion to see if the garbage collector mistakenly deletes the rs") err = wait.PollUntilContextTimeout(ctx, 500*time.Millisecond, 1*time.Minute+gcInformerResyncRetryTimeout, true, func(ctx context.Context) (bool, error) { dList, err := deployClient.List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list deployments: %w", err) } return len(dList.Items) == 0, nil }) if err != nil { framework.Failf("Failed to wait for the Deployment to be deleted: %v", err) } // Once the deployment object is gone, we'll know the GC has finished performing any relevant actions. objects := map[string]int{"Deployments": 0, "ReplicaSets": 1, "Pods": 2} ok, err := verifyRemainingObjects(ctx, f, objects) if err != nil { framework.Failf("Unexpected error while verifying remaining deployments, rs, and pods: %v", err) } if !ok { errList := make([]error, 0) remainingRSs, err := rsClient.List(ctx, metav1.ListOptions{}) if err != nil { errList = append(errList, fmt.Errorf("failed to list RSs post mortem: %w", err)) } else { errList = append(errList, fmt.Errorf("remaining rs post mortem: %#v", remainingRSs)) } remainingDSs, err := deployClient.List(ctx, metav1.ListOptions{}) if err != nil { errList = append(errList, fmt.Errorf("failed to list Deployments post mortem: %w", err)) } else { errList = append(errList, fmt.Errorf("remaining deployment's post mortem: %#v", remainingDSs)) } aggregatedError := utilerrors.NewAggregate(errList) framework.Failf("Failed to verify remaining deployments, rs, and pods: %v", aggregatedError) } rs, err := clientSet.AppsV1().ReplicaSets(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { framework.Failf("Failed to list ReplicaSet %v", err) } for _, replicaSet := range rs.Items { if metav1.GetControllerOf(&replicaSet.ObjectMeta) != nil { framework.Failf("Found ReplicaSet with non nil ownerRef %v", replicaSet) } } gatherMetrics(ctx, f) }) /* Release: v1.9 Testname: Garbage Collector, delete replication controller, after owned pods Description: Create a replication controller with maximum allocatable Pods between 10 and 100 replicas. Once RC is created and the all Pods are created, delete RC with deleteOptions.PropagationPolicy set to Foreground. Deleting the Replication Controller MUST cause pods created by that RC to be deleted before the RC is deleted. */ framework.ConformanceIt("should keep the rc around until all its pods are deleted if the deleteOptions says so", func(ctx context.Context) { clientSet := f.ClientSet rcClient := clientSet.CoreV1().ReplicationControllers(f.Namespace.Name) podClient := clientSet.CoreV1().Pods(f.Namespace.Name) rcName := "simpletest.rc" uniqLabels := getUniqLabel("gctest", "delete_pods_foreground") rc := newOwnerRC(f, rcName, estimateMaximumPods(ctx, clientSet, 10, 100), uniqLabels) ginkgo.By("create the rc") rc, err := rcClient.Create(ctx, rc, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create replication controller: %v", err) } // wait for rc to create pods waitForReplicas(ctx, rc, rcClient) ginkgo.By("delete the rc") deleteOptions := getForegroundOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(rc.UID)) if err := rcClient.Delete(ctx, rc.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the rc: %v", err) } ginkgo.By("wait for the rc to be deleted") // default client QPS is 20, deleting each pod requires 2 requests, so 30s should be enough // TODO: 30s is enough assuming immediate processing of dependents following // owner deletion, but in practice there can be a long delay between owner // deletion and dependent deletion processing. For now, increase the timeout // and investigate the processing delay. if err := wait.PollWithContext(ctx, 1*time.Second, 30*time.Second+gcInformerResyncRetryTimeout, func(ctx context.Context) (bool, error) { _, err := rcClient.Get(ctx, rc.Name, metav1.GetOptions{}) if err == nil { pods, _ := podClient.List(ctx, metav1.ListOptions{}) framework.Logf("%d pods remaining", len(pods.Items)) count := 0 for _, pod := range pods.Items { if pod.ObjectMeta.DeletionTimestamp == nil { count++ } } framework.Logf("%d pods has nil DeletionTimestamp", count) framework.Logf("") return false, nil } if apierrors.IsNotFound(err) { return true, nil } return false, err }); err != nil { pods, err2 := podClient.List(ctx, metav1.ListOptions{}) if err2 != nil { framework.Failf("%v", err2) } framework.Logf("%d remaining pods are:", len(pods.Items)) framework.Logf("The ObjectMeta of the remaining pods are:") for _, pod := range pods.Items { framework.Logf("%#v", pod.ObjectMeta) } framework.Failf("failed to delete the rc: %v", err) } // There shouldn't be any pods pods, err := podClient.List(ctx, metav1.ListOptions{}) if err != nil { framework.Failf("%v", err) } if len(pods.Items) != 0 { framework.Failf("expected no pods, got %#v", pods) } gatherMetrics(ctx, f) }) // TODO: this should be an integration test /* Release: v1.9 Testname: Garbage Collector, multiple owners Description: Create a replication controller RC1, with maximum allocatable Pods between 10 and 100 replicas. Create second replication controller RC2 and set RC2 as owner for half of those replicas. Once RC1 is created and the all Pods are created, delete RC1 with deleteOptions.PropagationPolicy set to Foreground. Half of the Pods that has RC2 as owner MUST not be deleted or have a deletion timestamp. Deleting the Replication Controller MUST not delete Pods that are owned by multiple replication controllers. */ framework.ConformanceIt("should not delete dependents that have both valid owner and owner that's waiting for dependents to be deleted", func(ctx context.Context) { clientSet := f.ClientSet rcClient := clientSet.CoreV1().ReplicationControllers(f.Namespace.Name) podClient := clientSet.CoreV1().Pods(f.Namespace.Name) rc1Name := "simpletest-rc-to-be-deleted" replicas := estimateMaximumPods(ctx, clientSet, 10, 100) halfReplicas := int(replicas / 2) uniqLabelsDeleted := getUniqLabel("gctest_d", "valid_and_pending_owners_d") rc1 := newOwnerRC(f, rc1Name, replicas, uniqLabelsDeleted) ginkgo.By("create the rc1") rc1, err := rcClient.Create(ctx, rc1, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create replication controller: %v", err) } rc2Name := "simpletest-rc-to-stay" uniqLabelsStay := getUniqLabel("gctest_s", "valid_and_pending_owners_s") rc2 := newOwnerRC(f, rc2Name, 0, uniqLabelsStay) ginkgo.By("create the rc2") rc2, err = rcClient.Create(ctx, rc2, metav1.CreateOptions{}) if err != nil { framework.Failf("Failed to create replication controller: %v", err) } // wait for rc1 to be stable waitForReplicas(ctx, rc1, rcClient) ginkgo.By(fmt.Sprintf("set half of pods created by rc %s to have rc %s as owner as well", rc1Name, rc2Name)) pods, err := podClient.List(ctx, metav1.ListOptions{}) framework.ExpectNoError(err, "failed to list pods in namespace: %s", f.Namespace.Name) patch := fmt.Sprintf(`{"metadata":{"ownerReferences":[{"apiVersion":"v1","kind":"ReplicationController","name":"%s","uid":"%s"}]}}`, rc2.ObjectMeta.Name, rc2.ObjectMeta.UID) for i := 0; i < halfReplicas; i++ { pod := pods.Items[i] _, err := podClient.Patch(ctx, pod.Name, types.StrategicMergePatchType, []byte(patch), metav1.PatchOptions{}) framework.ExpectNoError(err, "failed to apply to pod %s in namespace %s, a strategic merge patch: %s", pod.Name, f.Namespace.Name, patch) } ginkgo.By(fmt.Sprintf("delete the rc %s", rc1Name)) deleteOptions := getForegroundOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(rc1.UID)) if err := rcClient.Delete(ctx, rc1.ObjectMeta.Name, deleteOptions); err != nil { framework.Failf("failed to delete the rc: %v", err) } ginkgo.By("wait for the rc to be deleted") // TODO: shorten the timeout when we make GC's periodic API rediscovery more efficient. // Tracked at https://github.com/kubernetes/kubernetes/issues/50046. if err := wait.PollWithContext(ctx, 5*time.Second, 90*time.Second, func(ctx context.Context) (bool, error) { _, err := rcClient.Get(ctx, rc1.Name, metav1.GetOptions{}) if err == nil { pods, _ := podClient.List(ctx, metav1.ListOptions{}) framework.Logf("%d pods remaining", len(pods.Items)) count := 0 for _, pod := range pods.Items { if pod.ObjectMeta.DeletionTimestamp == nil { count++ } } framework.Logf("%d pods has nil DeletionTimestamp", count) framework.Logf("") return false, nil } if apierrors.IsNotFound(err) { return true, nil } return false, err }); err != nil { pods, err2 := podClient.List(ctx, metav1.ListOptions{}) if err2 != nil { framework.Failf("%v", err2) } framework.Logf("%d remaining pods are:", len(pods.Items)) framework.Logf("ObjectMeta of remaining pods are:") for _, pod := range pods.Items { framework.Logf("%#v", pod.ObjectMeta) } framework.Failf("failed to delete rc %s, err: %v", rc1Name, err) } // half of the pods should still exist, pods, err = podClient.List(ctx, metav1.ListOptions{}) if err != nil { framework.Failf("%v", err) } if len(pods.Items) != halfReplicas { framework.Failf("expected %d pods, got %d", halfReplicas, len(pods.Items)) } for _, pod := range pods.Items { if pod.ObjectMeta.DeletionTimestamp != nil { framework.Failf("expected pod DeletionTimestamp to be nil, got %#v", pod.ObjectMeta) } // they should only have 1 ownerReference left if len(pod.ObjectMeta.OwnerReferences) != 1 { framework.Failf("expected pod to only have 1 owner, got %#v", pod.ObjectMeta.OwnerReferences) } } gatherMetrics(ctx, f) if err = e2epod.DeletePodsWithGracePeriod(ctx, clientSet, pods.Items, 0); err != nil { framework.Logf("WARNING: failed to delete pods: %v", err) } }) // TODO: should be an integration test /* Release: v1.9 Testname: Garbage Collector, dependency cycle Description: Create three pods, patch them with Owner references such that pod1 has pod3, pod2 has pod1 and pod3 has pod2 as owner references respectively. Delete pod1 MUST delete all pods. The dependency cycle MUST not block the garbage collection. */ framework.ConformanceIt("should not be blocked by dependency circle", func(ctx context.Context) { clientSet := f.ClientSet podClient := clientSet.CoreV1().Pods(f.Namespace.Name) pod1Name := "pod1" pod1 := newGCPod(pod1Name) pod1, err := podClient.Create(ctx, pod1, metav1.CreateOptions{}) framework.ExpectNoError(err, "failed to create pod %s in namespace: %s", pod1Name, f.Namespace.Name) pod2Name := "pod2" pod2 := newGCPod(pod2Name) pod2, err = podClient.Create(ctx, pod2, metav1.CreateOptions{}) framework.ExpectNoError(err, "failed to create pod %s in namespace: %s", pod2Name, f.Namespace.Name) pod3Name := "pod3" pod3 := newGCPod(pod3Name) pod3, err = podClient.Create(ctx, pod3, metav1.CreateOptions{}) framework.ExpectNoError(err, "failed to create pod %s in namespace: %s", pod3Name, f.Namespace.Name) // create circular dependency addRefPatch := func(name string, uid types.UID) []byte { return []byte(fmt.Sprintf(`{"metadata":{"ownerReferences":[{"apiVersion":"v1","kind":"Pod","name":"%s","uid":"%s","controller":true,"blockOwnerDeletion":true}]}}`, name, uid)) } patch1 := addRefPatch(pod3.Name, pod3.UID) pod1, err = podClient.Patch(ctx, pod1.Name, types.StrategicMergePatchType, patch1, metav1.PatchOptions{}) framework.ExpectNoError(err, "failed to apply to pod %s in namespace %s, a strategic merge patch: %s", pod1.Name, f.Namespace.Name, patch1) framework.Logf("pod1.ObjectMeta.OwnerReferences=%#v", pod1.ObjectMeta.OwnerReferences) patch2 := addRefPatch(pod1.Name, pod1.UID) pod2, err = podClient.Patch(ctx, pod2.Name, types.StrategicMergePatchType, patch2, metav1.PatchOptions{}) framework.ExpectNoError(err, "failed to apply to pod %s in namespace %s, a strategic merge patch: %s", pod2.Name, f.Namespace.Name, patch2) framework.Logf("pod2.ObjectMeta.OwnerReferences=%#v", pod2.ObjectMeta.OwnerReferences) patch3 := addRefPatch(pod2.Name, pod2.UID) pod3, err = podClient.Patch(ctx, pod3.Name, types.StrategicMergePatchType, patch3, metav1.PatchOptions{}) framework.ExpectNoError(err, "failed to apply to pod %s in namespace %s, a strategic merge patch: %s", pod3.Name, f.Namespace.Name, patch3) framework.Logf("pod3.ObjectMeta.OwnerReferences=%#v", pod3.ObjectMeta.OwnerReferences) // delete one pod, should result in the deletion of all pods deleteOptions := getForegroundOptions() deleteOptions.Preconditions = metav1.NewUIDPreconditions(string(pod1.UID)) err = podClient.Delete(ctx, pod1.ObjectMeta.Name, deleteOptions) framework.ExpectNoError(err, "failed to delete pod %s in namespace: %s", pod1.Name, f.Namespace.Name) var pods *v1.PodList var err2 error // TODO: shorten the timeout when we make GC's periodic API rediscovery more efficient. // Tracked at https://github.com/kubernetes/kubernetes/issues/50046. if err := wait.PollWithContext(ctx, 5*time.Second, 90*time.Second+gcInformerResyncRetryTimeout, func(ctx context.Context) (bool, error) { pods, err2 = podClient.List(ctx, metav1.ListOptions{}) if err2 != nil { return false, fmt.Errorf("failed to list pods: %w", err) } if len(pods.Items) == 0 { return true, nil } return false, nil }); err != nil { data, _ := json.Marshal(pods.Items) framework.Logf("pods are %s", string(data)) framework.Failf("failed to wait for all pods to be deleted: %v", err) } }) ginkgo.It("should support cascading deletion of custom resources", func(ctx context.Context) { config, err := framework.LoadConfig() if err != nil { framework.Failf("failed to load config: %v", err) } apiExtensionClient, err := apiextensionsclientset.NewForConfig(config) if err != nil { framework.Failf("failed to initialize apiExtensionClient: %v", err) } // Create a random custom resource definition and ensure it's available for // use. definition := apiextensionstestserver.NewRandomNameV1CustomResourceDefinition(apiextensionsv1.ClusterScoped) defer func() { err = apiextensionstestserver.DeleteV1CustomResourceDefinition(definition, apiExtensionClient) if err != nil && !apierrors.IsNotFound(err) { framework.Failf("failed to delete CustomResourceDefinition: %v", err) } }() definition, err = apiextensionstestserver.CreateNewV1CustomResourceDefinition(definition, apiExtensionClient, f.DynamicClient) if err != nil { framework.Failf("failed to create CustomResourceDefinition: %v", err) } gomega.Expect(definition.Spec.Versions).To(gomega.HaveLen(1), "custom resource definition should have one version") version := definition.Spec.Versions[0] // Get a client for the custom resource. gvr := schema.GroupVersionResource{Group: definition.Spec.Group, Version: version.Name, Resource: definition.Spec.Names.Plural} resourceClient := f.DynamicClient.Resource(gvr) apiVersion := definition.Spec.Group + "/" + version.Name // Create a custom owner resource. ownerName := names.SimpleNameGenerator.GenerateName("owner") owner := &unstructured.Unstructured{ Object: map[string]interface{}{ "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "metadata": map[string]interface{}{ "name": ownerName, }, }, } persistedOwner, err := resourceClient.Create(ctx, owner, metav1.CreateOptions{}) if err != nil { framework.Failf("failed to create owner resource %q: %v", ownerName, err) } framework.Logf("created owner resource %q", ownerName) // Create a custom dependent resource. dependentName := names.SimpleNameGenerator.GenerateName("dependent") dependent := &unstructured.Unstructured{ Object: map[string]interface{}{ "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "metadata": map[string]interface{}{ "name": dependentName, "ownerReferences": []interface{}{ map[string]interface{}{ "uid": string(persistedOwner.GetUID()), "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "name": ownerName, }, }, }, }, } persistedDependent, err := resourceClient.Create(ctx, dependent, metav1.CreateOptions{}) if err != nil { framework.Failf("failed to create dependent resource %q: %v", dependentName, err) } framework.Logf("created dependent resource %q", dependentName) // Delete the owner. background := metav1.DeletePropagationBackground err = resourceClient.Delete(ctx, ownerName, metav1.DeleteOptions{PropagationPolicy: &background}) if err != nil { framework.Failf("failed to delete owner resource %q: %v", ownerName, err) } // Create and delete an unrelated instance of the custom resource in foreground deletion mode, // so we have a signal when GC is aware of this custom resource type canaryName := names.SimpleNameGenerator.GenerateName("canary") canary := &unstructured.Unstructured{ Object: map[string]interface{}{ "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "metadata": map[string]interface{}{"name": canaryName}}, } _, err = resourceClient.Create(ctx, canary, metav1.CreateOptions{}) if err != nil { framework.Failf("failed to create canary resource %q: %v", canaryName, err) } framework.Logf("created canary resource %q", canaryName) foreground := metav1.DeletePropagationForeground err = resourceClient.Delete(ctx, canaryName, metav1.DeleteOptions{PropagationPolicy: &foreground}) if err != nil { framework.Failf("failed to delete canary resource %q: %v", canaryName, err) } // Wait for the canary foreground finalization to complete, which means GC is aware of our new custom resource type var lastCanary *unstructured.Unstructured if err := wait.PollUntilContextTimeout(ctx, 5*time.Second, 3*time.Minute, true, func(ctx context.Context) (bool, error) { lastCanary, err = resourceClient.Get(ctx, dependentName, metav1.GetOptions{}) return apierrors.IsNotFound(err), nil }); err != nil { framework.Logf("canary last state: %#v", lastCanary) framework.Failf("failed waiting for canary resource %q to be deleted", canaryName) } // Ensure the dependent is deleted. var lastDependent *unstructured.Unstructured var err2 error if err := wait.PollWithContext(ctx, 5*time.Second, 60*time.Second, func(ctx context.Context) (bool, error) { lastDependent, err2 = resourceClient.Get(ctx, dependentName, metav1.GetOptions{}) return apierrors.IsNotFound(err2), nil }); err != nil { framework.Logf("owner: %#v", persistedOwner) framework.Logf("dependent: %#v", persistedDependent) framework.Logf("dependent last state: %#v", lastDependent) framework.Failf("failed waiting for dependent resource %q to be deleted", dependentName) } // Ensure the owner is deleted. _, err = resourceClient.Get(ctx, ownerName, metav1.GetOptions{}) if err == nil { framework.Failf("expected owner resource %q to be deleted", ownerName) } else { if !apierrors.IsNotFound(err) { framework.Failf("unexpected error getting owner resource %q: %v", ownerName, err) } } }) ginkgo.It("should support orphan deletion of custom resources", func(ctx context.Context) { config, err := framework.LoadConfig() if err != nil { framework.Failf("failed to load config: %v", err) } apiExtensionClient, err := apiextensionsclientset.NewForConfig(config) if err != nil { framework.Failf("failed to initialize apiExtensionClient: %v", err) } // Create a random custom resource definition and ensure it's available for // use. definition := apiextensionstestserver.NewRandomNameV1CustomResourceDefinition(apiextensionsv1.ClusterScoped) defer func() { err = apiextensionstestserver.DeleteV1CustomResourceDefinition(definition, apiExtensionClient) if err != nil && !apierrors.IsNotFound(err) { framework.Failf("failed to delete CustomResourceDefinition: %v", err) } }() definition, err = apiextensionstestserver.CreateNewV1CustomResourceDefinition(definition, apiExtensionClient, f.DynamicClient) if err != nil { framework.Failf("failed to create CustomResourceDefinition: %v", err) } gomega.Expect(definition.Spec.Versions).To(gomega.HaveLen(1), "custom resource definition should have one version") version := definition.Spec.Versions[0] // Get a client for the custom resource. gvr := schema.GroupVersionResource{Group: definition.Spec.Group, Version: version.Name, Resource: definition.Spec.Names.Plural} resourceClient := f.DynamicClient.Resource(gvr) apiVersion := definition.Spec.Group + "/" + version.Name // Create a custom owner resource. ownerName := names.SimpleNameGenerator.GenerateName("owner") owner := &unstructured.Unstructured{ Object: map[string]interface{}{ "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "metadata": map[string]interface{}{ "name": ownerName, }, }, } persistedOwner, err := resourceClient.Create(ctx, owner, metav1.CreateOptions{}) if err != nil { framework.Failf("failed to create owner resource %q: %v", ownerName, err) } framework.Logf("created owner resource %q", ownerName) // Create a custom dependent resource. dependentName := names.SimpleNameGenerator.GenerateName("dependent") dependent := &unstructured.Unstructured{ Object: map[string]interface{}{ "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "metadata": map[string]interface{}{ "name": dependentName, "ownerReferences": []map[string]string{ { "uid": string(persistedOwner.GetUID()), "apiVersion": apiVersion, "kind": definition.Spec.Names.Kind, "name": ownerName, }, }, }, }, } _, err = resourceClient.Create(ctx, dependent, metav1.CreateOptions{}) if err != nil { framework.Failf("failed to create dependent resource %q: %v", dependentName, err) } framework.Logf("created dependent resource %q", dependentName) // Delete the owner and orphan the dependent. err = resourceClient.Delete(ctx, ownerName, getOrphanOptions()) if err != nil { framework.Failf("failed to delete owner resource %q: %v", ownerName, err) } ginkgo.By("wait for the owner to be deleted") if err := wait.PollWithContext(ctx, 5*time.Second, 120*time.Second, func(ctx context.Context) (bool, error) { _, err = resourceClient.Get(ctx, ownerName, metav1.GetOptions{}) if err == nil { return false, nil } if err != nil && !apierrors.IsNotFound(err) { return false, fmt.Errorf("failed to get owner: %w", err) } return true, nil }); err != nil { framework.Failf("timeout in waiting for the owner to be deleted: %v", err) } timeout := 30*time.Second + gcInformerResyncRetryTimeout ginkgo.By(fmt.Sprintf("wait for %s to see if the garbage collector mistakenly deletes the dependent crd\n", timeout)) gomega.Consistently(ctx, framework.HandleRetry(func(ctx context.Context) (*unstructured.Unstructured, error) { return resourceClient.Get(ctx, dependentName, metav1.GetOptions{}) })).WithTimeout(timeout).WithPolling(5 * time.Second).ShouldNot(gomega.BeNil()) }) ginkgo.It("should delete jobs and pods created by cronjob", func(ctx context.Context) { ginkgo.By("Create the cronjob") cronJob := newCronJob("simple", "*/1 * * * ?") cronJob, err := f.ClientSet.BatchV1().CronJobs(f.Namespace.Name).Create(ctx, cronJob, metav1.CreateOptions{}) framework.ExpectNoError(err, "failed to create cronjob: %+v, in namespace: %s", cronJob, f.Namespace.Name) ginkgo.By("Wait for the CronJob to create new Job") err = wait.PollUntilContextTimeout(ctx, 500*time.Millisecond, 2*time.Minute, true, func(ctx context.Context) (bool, error) { jobs, err := f.ClientSet.BatchV1().Jobs(f.Namespace.Name).List(ctx, metav1.ListOptions{}) if err != nil { return false, fmt.Errorf("failed to list jobs: %w", err) } return len(jobs.Items) > 0, nil }) if err != nil { framework.Failf("Failed to wait for the CronJob to create some Jobs: %v", err) } ginkgo.By("Delete the cronjob") if err := f.ClientSet.BatchV1().CronJobs(f.Namespace.Name).Delete(ctx, cronJob.Name, getBackgroundOptions()); err != nil { framework.Failf("Failed to delete the CronJob: %v", err) } ginkgo.By("Verify if cronjob does not leave jobs nor pods behind") err = wait.PollUntilContextTimeout(ctx, 500*time.Millisecond, 1*time.Minute, true, func(ctx context.Context) (bool, error) { objects := map[string]int{"CronJobs": 0, "Jobs": 0, "Pods": 0} return verifyRemainingObjects(ctx, f, objects) }) if err != nil { framework.Failf("Failed to wait for all jobs and pods to be deleted: %v", err) } gatherMetrics(ctx, f) }) }) // TODO(106575): Migrate away from generic polling function. func waitForReplicas(ctx context.Context, rc *v1.ReplicationController, rcClient clientv1.ReplicationControllerInterface) { var ( lastObservedRC *v1.ReplicationController err error ) if err := wait.PollWithContext(ctx, framework.Poll, replicaSyncTimeout, func(ctx context.Context) (bool, error) { lastObservedRC, err = rcClient.Get(ctx, rc.Name, metav1.GetOptions{}) if err != nil { return false, err } if lastObservedRC.Status.Replicas == *rc.Spec.Replicas { return true, nil } return false, nil }); err != nil { if lastObservedRC == nil { framework.Failf("Failed to get ReplicationController %q: %v", rc.Name, err) } else { framework.Failf("failed to wait for the rc.Status.Replicas (%d) to reach rc.Spec.Replicas (%d): %v", lastObservedRC.Status.Replicas, *lastObservedRC.Spec.Replicas, err) } } }