MESH-6000: ignore argo tracking tags during VS copy

admiral/cmd/admiral/cmd/root.go

@@ -240,11 +240,11 @@ func GetRootCmd(args []string) *cobra.Command {
 	rootCmd.PersistentFlags().BoolVar(&params.EnableSWAwareNSCaches, "enable_sw_aware_ns_caches", false, "Enable/Disable SW Aware NS Caches")
 	rootCmd.PersistentFlags().BoolVar(&params.AdmiralStateSyncerMode, "admiral_state_syncer_mode", false, "Enable/Disable admiral to run as state syncer only")
 	rootCmd.PersistentFlags().Int64Var(&params.DefaultWarmupDurationSecs, "default_warmup_duration_in_seconds", 45, "The default value for the warmupDurationSecs to be used on Destination Rules created by admiral")
-
 	rootCmd.PersistentFlags().BoolVar(&params.EnableGenerationCheck, "enable_generation_check", true, "Enable/Disable Generation Check")
 	rootCmd.PersistentFlags().BoolVar(&params.EnableIsOnlyReplicaCountChangedCheck, "enable_replica_count_check", false, "Enable/Disable Replica Count Check")
 	rootCmd.PersistentFlags().BoolVar(&params.ClientInitiatedProcessingEnabled, "client_initiated_processing_enabled", true, "Enable/Disable Client Initiated Processing")
 	rootCmd.PersistentFlags().BoolVar(&params.PreventSplitBrain, "prevent_split_brain", true, "Enable/Disable Explicit Split Brain prevention logic")
+	rootCmd.PersistentFlags().StringSliceVar(&params.IgnoreLabelsAnnotationsVSCopyList, "ignore_labels_annotations_vs_copy_list", []string{"applications.argoproj.io/app-name", "app.kubernetes.io/instance", "argocd.argoproj.io/tracking-id"}, "Labels and annotations that should not be preserved during VS copy")
 
 	//Admiral 2.0 flags
 	rootCmd.PersistentFlags().BoolVar(&params.AdmiralOperatorMode, "admiral_operator_mode", false, "Enable/Disable admiral operator functionality")

admiral/pkg/clusters/virtualservice_handler.go

@@ -529,6 +529,12 @@ func addUpdateVirtualService(
 		skipAddingExportTo = true
 	}
 
+	// remove ignored labels and annotations from NewCopy (deleting on nil map or nonexistent keys is a no-op)
+	for _, ignored := range common.GetIgnoreLabelsAnnotationsVSCopy() {
+		delete(newCopy.Labels, ignored)
+		delete(newCopy.Annotations, ignored)
+	}
+
 	if common.EnableExportTo(newCopy.Spec.Hosts[0]) && !skipAddingExportTo {
 		sortedDependentNamespaces := getSortedDependentNamespaces(rr.AdmiralCache, newCopy.Spec.Hosts[0], rc.ClusterID, ctxLogger)
 		newCopy.Spec.ExportTo = sortedDependentNamespaces

admiral/pkg/clusters/virtualservice_handler_test.go

@@ -1773,7 +1773,9 @@ func TestAddUpdateVirtualService(t *testing.T) {
 		namespace = "testns"
 		fooVS     = &apiNetworkingV1Alpha3.VirtualService{
 			ObjectMeta: metaV1.ObjectMeta{
-				Name: "stage.test00.foo-vs",
+				Name:        "stage.test00.foo-vs",
+				Labels:      map[string]string{"applications.argoproj.io/app-name": "test", "app.kubernetes.io/instance": "test"},
+				Annotations: map[string]string{"argocd.argoproj.io/tracking-id": "test"},
 			},
 			Spec: networkingV1Alpha3.VirtualService{
 				Hosts: []string{"stage.test00.foo", "stage.test00.bar"},
@@ -1789,10 +1791,13 @@ func TestAddUpdateVirtualService(t *testing.T) {
 		},
 	}
 	admiralParams := common.AdmiralParams{
-		LabelSet:              &common.LabelSet{},
-		SyncNamespace:         "test-sync-ns",
-		EnableSWAwareNSCaches: true,
+		LabelSet:                          &common.LabelSet{},
+		SyncNamespace:                     "test-sync-ns",
+		EnableSWAwareNSCaches:             true,
+		IgnoreLabelsAnnotationsVSCopyList: []string{"applications.argoproj.io/app-name", "app.kubernetes.io/instance", "argocd.argoproj.io/tracking-id"},
 	}
+	common.ResetSync()
+	common.InitializeConfig(admiralParams)
 	rr := NewRemoteRegistry(ctx, admiralParams)
 
 	cases := []struct {
@@ -1818,6 +1823,18 @@ func TestAddUpdateVirtualService(t *testing.T) {
 	for _, c := range cases {
 		t.Run(c.name, func(t *testing.T) {
 			addUpdateVirtualService(ctxLogger, ctx, c.newVS, c.existingVS, namespace, rc, rr)
+			vs, err := istioClientWithExistingVS.NetworkingV1alpha3().VirtualServices(namespace).Get(ctx, fooVS.Name, metaV1.GetOptions{})
+			if err != nil {
+				t.Errorf("failed to get VS with error: %v", err)
+			}
+			for _, ignored := range common.GetIgnoreLabelsAnnotationsVSCopy() {
+				if vs.Labels[ignored] != "" {
+					t.Errorf("expected VS to not ignored labels, but got labels: %v", ignored)
+				}
+				if vs.Annotations[ignored] != "" {
+					t.Errorf("expected VS to not ignored annotations, but got annotations: %v", ignored)
+				}
+			}
 		})
 	}
 }

admiral/pkg/controller/common/config.go

@@ -576,3 +576,9 @@ func GetOperatorSecretFilterTags() string {
 	defer wrapper.RUnlock()
 	return wrapper.params.OperatorSecretFilterTags
 }
+
+func GetIgnoreLabelsAnnotationsVSCopy() []string {
+	wrapper.RLock()
+	defer wrapper.RUnlock()
+	return wrapper.params.IgnoreLabelsAnnotationsVSCopyList
+}

admiral/pkg/controller/common/config_test.go

@@ -80,6 +80,7 @@ func setupForConfigTests() {
 			AdditionalEndpointSuffixes:             []string{"suffix1", "suffix2"},
 			AdditionalEndpointLabelFilters:         []string{"label1", "label2"},
 			EnableWorkloadDataStorage:              true,
+			IgnoreLabelsAnnotationsVSCopyList:      []string{"applications.argoproj.io/app-name", "app.kubernetes.io/instance", "argocd.argoproj.io/tracking-id"},
 		}
 		ResetSync()
 		initHappened = true
@@ -488,6 +489,10 @@ func TestConfigManagement(t *testing.T) {
 	if !GetEnableWorkloadDataStorage() {
 		t.Errorf("Enable workload data storage mismatch, expected true, got %v", GetEnableWorkloadDataStorage())
 	}
+
+	if len(GetIgnoreLabelsAnnotationsVSCopy()) != 3 {
+		t.Errorf("ignored labels and annotations for VS copy mismatch, expected 3, got %v", GetIgnoreLabelsAnnotationsVSCopy())
+	}
 }
 
 func TestGetCRDIdentityLabelWithCRDIdentity(t *testing.T) {

admiral/pkg/controller/common/types.go

@@ -108,6 +108,7 @@ type AdmiralParams struct {
 	EnableGenerationCheck                    bool
 	EnableIsOnlyReplicaCountChangedCheck     bool
 	PreventSplitBrain                        bool
+	IgnoreLabelsAnnotationsVSCopyList        []string
 
 	// Cartographer specific params
 	TrafficConfigPersona      bool