From acc268cf4cfb6cd80b6a6d54c238bfdd2e95d0c3 Mon Sep 17 00:00:00 2001 From: Andrea Fasano Date: Mon, 20 Jul 2026 05:34:53 -0400 Subject: [PATCH] fix: wait for default ServiceAccount before creating IRI test pod CreateSimpleNamespace waited for SCC annotations but not for the default ServiceAccount, causing a race on ha5 clusters where the service-account-controller is slower to provision it. Co-Authored-By: Claude Opus 4.6 --- test/extended/internalreleaseimage/helper.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/test/extended/internalreleaseimage/helper.go b/test/extended/internalreleaseimage/helper.go index 8747c9c76f50..b650a5f1344f 100644 --- a/test/extended/internalreleaseimage/helper.go +++ b/test/extended/internalreleaseimage/helper.go @@ -190,6 +190,12 @@ func (h *IRITestHelper) CreateSimpleNamespace() string { o.Expect(err).NotTo(o.HaveOccurred(), "Timed out waiting for namespace %s to get SCC annotations", createdNs.Name) } + err = exutil.WaitForServiceAccount(h.oc.AdminKubeClient().CoreV1().ServiceAccounts(createdNs.Name), "default") + if err != nil { + h.DeleteNamespace(createdNs.Name) + o.Expect(err).NotTo(o.HaveOccurred(), "Timed out waiting for default ServiceAccount in namespace %s", createdNs.Name) + } + return createdNs.Name }