🐛 wrap service account not found error

internal/authentication/tokengetter.go

@@ -2,6 +2,7 @@ package authentication
 
 import (
 	"context"
+	"fmt"
 	"sync"
 	"time"
 
@@ -19,6 +20,14 @@ type TokenGetter struct {
 	mu                 sync.RWMutex
 }
 
+type SANotFoundError struct {
+	ServiceAccountName string
+}
+
+func (e *SANotFoundError) Error() string {
+	return fmt.Sprintf(" Unable to authenticate with Kubernetes cluster using ServiceAccount \"%s\": ServiceAccount \"%s\" not found.", e.ServiceAccountName, e.ServiceAccountName)
+}
+
 type TokenGetterOption func(*TokenGetter)
 
 const (
@@ -86,7 +95,8 @@ func (t *TokenGetter) getToken(ctx context.Context, key types.NamespacedName) (*
 			Spec: authenticationv1.TokenRequestSpec{ExpirationSeconds: ptr.To(int64(t.expirationDuration / time.Second))},
 		}, metav1.CreateOptions{})
 	if err != nil {
-		return nil, err
+		saErr := &SANotFoundError{key.Name}
+		return nil, saErr
 	}
 	return &req.Status, nil
 }

internal/controllers/clusterextension_controller.go

@@ -47,6 +47,7 @@ import (
 	"github.com/operator-framework/api/pkg/operators/v1alpha1"
 	catalogd "github.com/operator-framework/catalogd/api/v1"
 	helmclient "github.com/operator-framework/helm-operator-plugins/pkg/client"
+	tokengetter "github.com/operator-framework/operator-controller/internal/authentication"
 	"github.com/operator-framework/operator-registry/alpha/declcfg"
 
 	ocv1 "github.com/operator-framework/operator-controller/api/v1"
@@ -206,6 +207,11 @@ func (r *ClusterExtensionReconciler) reconcile(ctx context.Context, ext *ocv1.Cl
 	installedBundle, err := r.InstalledBundleGetter.GetInstalledBundle(ctx, ext)
 	if err != nil {
 		setInstallStatus(ext, nil)
+		var saerr *tokengetter.SANotFoundError
+		if errors.As(err, &saerr) {
+			l.Info("is a SAError")
+			err = saerr
+		}
 		setInstalledStatusConditionUnknown(ext, err.Error())
 		setStatusProgressing(ext, errors.New("retrying to get installed bundle"))
 		return ctrl.Result{}, err