Apply changes to access requests only to the latest version

[FrederiqueRetsema]

When the plugin denies the request, the user tries again and the plugin allows the request, the Ephemeral Access Extension will give an error:

2025-06-07T12:26:00.432Z ERROR Reconciler error {"controller": "accessrequest", "controllerGroup": "ephemeral-access.argoproj-labs.io", "controllerKind": "AccessRequest", "AccessRequest": {"name":"frederique.retsema-devops-6j6hd","namespace":"argocd"}, "namespace": "argocd", "name": "frederique.retsema-devops-6j6hd", "reconcileID": "51eae0f7-bc18-4539-8e95-29a55bf6b85c", "error": "error handling permission: error updating access request status to granted: Operation cannot be fulfilled on accessrequests.ephemeral-access.argoproj-labs.io "frederique.retsema-devops-6j6hd": the object has been modified; please apply your changes to the latest version and try again"}

Can you please change this, so the Ephemeral Access Extension just changes the latest request for a specific role? (Or: make this a debug message?)

Thx in advance!

[leoluz]

The controller will try to reconcile and log this error as a result of a race condition. Raising the error will re-schedule the AccessRequest and the next reconciliation should fix the situation. I decided to log so we know when this is happening as those race conditions should only happen in rare cases. Are you many log entries with this error?