[BUG] IstioCNI ReconcileError on the latest OCP 4.20 nightly build #970
Description
Is this the right place to submit this?
- This is not a question about how to use the sail-operator
Bug Description
When you create IstioCNI
kind: IstioCNI
apiVersion: sailoperator.io/v1
metadata:
name: default
spec:
namespace: istio-system
version: v1.26.2
EOF
on the latest OCP 4.20 nightly (4.20.0-0.nightly-multi-2025-06-30-194335), the IstioCNI status is ReconcileError and contains the following error:
Message: error reconciling resource: failed to install/update Helm chart "cni": failed to roll back helm release istio-cni: cannot patch "istio-cni" with kind NetworkAttachmentDefinition: network-attachment-definitions.k8s.cni.cncf.io "istio-cni" is forbidden: expression 'oldObject == null || object == null || object.spec != oldObject.spec' resulted in error: no such key: spec
but the namespace contains Istio CNI pods running, and from a functional POV, the Istio CNI is working ( bookinfo app works )
The sail operator contains the following error:
2025-07-31T14:50:37Z ERROR ctrlr.istiocni Reconciler error {"IstioCNI": "default", "reconcileID": "16268f96-5d86-4a46-a2aa-c08826141484", "error": "failed to install/update Helm chart \"cni\": failed to roll back helm release istio-cni: cannot patch \"istio-cni\" with kind NetworkAttachmentDefinition: network-attachment-definitions.k8s.cni.cncf.io \"istio-cni\" is forbidden: expression 'oldObject == null || object == null || object.spec != oldObject.spec' resulted in error: no such key: spec"}
It was working on the previous 4.20 nightly versions ( IIRC, the week before that version)
Operator Version
1.26.2
Link to Gist with Logs
No response
Additional Information
No response