• Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • ACM 2.10.3
    • ACM 2.10.0
    • GRC
    • None
    • 1
    • False
    • None
    • False
    • GRC Sprint 2024-06
    • Moderate
    • No

      When a dry-run update is made, the error is both not logged and the message is not returned to the policy status.

      This is particularly noticeable when recordDiff is set because the diff is not logged but no context is given as to why.

            [ACM-10612] Update failure messages are not surfaced

            Dale Haiducek added a comment - - edited

            Confirmed on 2.10.1-SNAPSHOT-2024-03-28-21-23-55 (these are the logs in the config-policy-controller where the recordDiff output would have been)

            2024-03-29T17:49:32.712Z info configuration-policy-controller controllers/configurationpolicy_controller.go:2631
            Dry run update failed with error:
            admission webhook "multiclusterhub.validating-webhook.open-cluster-management.io" denied the request:
            invalid componentconfig: managedserviceaccount is not a known component
            {"policy": "demo-fromsecret", "name": "multiclusterhub", "namespace": "open-cluster-management", "resource": "multiclusterhubs"}
            

            Dale Haiducek added a comment - - edited Confirmed on 2.10.1-SNAPSHOT-2024-03-28-21-23-55 (these are the logs in the config-policy-controller where the recordDiff output would have been) 2024-03-29T17:49:32.712Z info configuration-policy-controller controllers/configurationpolicy_controller.go:2631 Dry run update failed with error: admission webhook "multiclusterhub.validating-webhook.open-cluster-management.io" denied the request: invalid componentconfig: managedserviceaccount is not a known component { "policy" : "demo-fromsecret" , "name" : "multiclusterhub" , "namespace" : "open-cluster-management" , "resource" : "multiclusterhubs" }

              rh-ee-dhaiduce Dale Haiducek
              rh-ee-dhaiduce Dale Haiducek
              ManiKrishna Sai Ravi
              Derek Ho Derek Ho
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: