Increased sa and secret creation_time difference check (#1)

Increased service_account and secret creation_time difference check to a bigger limit, 60 seconds; instead of 3 seconds. If we have mutation webhooks, the secret creation can take longer. hashicorp#1104
amsgeodis · Feb 11, 2021 · 68037bb · 68037bb
1 parent 1a5d859
commit 68037bb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/kubernetes/resource_kubernetes_service_account.go b/kubernetes/resource_kubernetes_service_account.go
@@ -186,7 +186,7 @@ func findDefaultServiceAccount(ctx context.Context, sa *api.ServiceAccount, conn
 			continue
 		}
 
-		if secret.CreationTimestamp.Sub(sa.CreationTimestamp.Time) > (3 * time.Second) {
+		if secret.CreationTimestamp.Sub(sa.CreationTimestamp.Time) > (60 * time.Second) {
 			log.Printf("[DEBUG] Skipping %s as it wasn't created at the same time as the service account", saSecret.Name)
 			continue
 		}