Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-11069

[ACM 2.9] Submariner 0.17 - Submariner uninstall fails due to incorrect permissions

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • None
    • ACM 2.10.2
    • None
    • Submariner Sprint 2024-20, Submariner Sprint 2024-21
    • Critical
    • No

      Description of problem:

      ACM 2.10.2
      Submariner 0.17.0

      Submariner fails to complete uninstall.
      The components on the managed clusters deleted, but GW node remains.

      Hub submariner-addon pod error:

      I0414 18:27:49.546752       1 event.go:364] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"open-cluster-management", Name:"submariner-addon", UID:"6a8148a8-c265-41c6-b9b0-3ef467b47711", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'SubmarinerManifestWorksDeleted' Deleted manifestwork "mbabushk-gcp/submariner-operator"
      E0414 18:27:49.788610       1 base_controller.go:266] "SubmarinerAgentController" controller failed to sync "mbabushk-gcp", err: secrets "mbabushk-gcp-broker" is forbidden: User "system:serviceaccount:open-cluster-management:submariner-addon" cannot delete resource "secrets" in API group "" in the namespace "submariner-broker"
      2024-04-14T18:27:49.788Z INF ..agent/controller.go:285 ..nerAgentController ManagedClusterAddOn "submariner" in cluster "mbabushk-gcp" is deleting
      E0414 18:27:50.188347       1 base_controller.go:266] "SubmarinerAgentController" controller failed to sync "mbabushk-gcp", err: secrets "mbabushk-gcp-broker" is forbidden: User "system:serviceaccount:open-cluster-management:submariner-addon" cannot delete resource "secrets" in API group "" in the namespace "submariner-broker"
      2024-04-14T18:27:50.188Z INF ..agent/controller.go:285 ..nerAgentController ManagedClusterAddOn "submariner" in cluster "mbabushk-gcp" is deleting 

      Submariner-addon pod log attached.

      Expected results:

      Additional info:

            rh-ee-vthapar Vishal Thapar
            mbabushk@redhat.com Maxim Babushkin
            Maxim Babushkin Maxim Babushkin
            ACM QE Team
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: