Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-30409

multiclusterroleassignment status.roleassignment reporting wrong reason and status messages

XMLWordPrintable

    • Quality / Stability / Reliability
    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • Low
    • None

      Description of problem: 

      when an roleassignment has a placement with an unavailable cluster assignment the expected error should be reporting

      roleAssignments
      reason: Pending
      status: Error

      Version-Release number of selected component (if applicable):

      ACM 2.16

      How reproducible: Always

      Steps to Reproduce:

      1. Create a multiclusterroleassignment with a subject being assigned with a managed cluster that is in unavailable status

      Additional info:

      example multiclusterroleassignment

      apiVersion: rbac.open-cluster-management.io/v1beta1
      kind: MulticlusterRoleAssignment
      metadata:
        resourceVersion: '317800'
        name: test-mra-view-1772135440
        uid: b73609f8-d547-4520-b3a2-994493bc6ffa
        creationTimestamp: '2026-02-26T19:50:41Z'
        generation: 1
        managedFields:
          - apiVersion: rbac.open-cluster-management.io/v1beta1
            fieldsType: FieldsV1
            fieldsV1:
              'f:metadata':
                'f:finalizers':
                  .: {}
                  'v:"finalizer.rbac.open-cluster-management.io/multiclusterroleassignment"': {}
            manager: manager
            operation: Update
            time: '2026-02-26T19:50:41Z'
          - apiVersion: rbac.open-cluster-management.io/v1beta1
            fieldsType: FieldsV1
            fieldsV1:
              'f:metadata':
                'f:labels':
                  .: {}
                  'f:qe-e2e-test': {}
              'f:spec':
                .: {}
                'f:roleAssignments':
                  .: {}
                  'k:{"name":"test-unavailable-assignment"}':
                    .: {}
                    'f:clusterRole': {}
                    'f:clusterSelection':
                      .: {}
                      'f:placements': {}
                      'f:type': {}
                    'f:name': {}
                    'f:targetNamespaces': {}
                'f:subject': {}
            manager: multiclusterroleassignment.test
            operation: Update
            time: '2026-02-26T19:50:41Z'
          - apiVersion: rbac.open-cluster-management.io/v1beta1
            fieldsType: FieldsV1
            fieldsV1:
              'f:status':
                .: {}
                'f:appliedClusters': {}
                'f:conditions': {}
                'f:roleAssignments': {}
            manager: manager
            operation: Update
            subresource: status
            time: '2026-02-26T21:02:34Z'
        namespace: open-cluster-management-global-set
        finalizers:
          - finalizer.rbac.open-cluster-management.io/multiclusterroleassignment
        labels:
          qe-e2e-test: 'true'
      spec:
        roleAssignments:
          - clusterRole: 'kubevirt.io:view'
            clusterSelection:
              placements:
                - name: test-placement-unavailable-1772135440
                  namespace: open-cluster-management-global-set
              type: placements
            name: test-unavailable-assignment
            targetNamespaces:
              - default
        subject:
          kind: User
          name: test-unavailable-user
      status:
        appliedClusters:
          - test-unavailable-cluster-1772135440
        conditions:
          - lastTransitionTime: '2026-02-26T21:02:34Z'
            message: 1 out of 1 ClusterPermission(s) application failed
            observedGeneration: 1
            reason: ApplyFailed
            status: 'False'
            type: Applied
          - lastTransitionTime: '2026-02-26T19:50:41Z'
            message: 1 out of 1 role assignment(s) failed
            observedGeneration: 1
            reason: AssignmentsFailure
            status: 'False'
            type: Ready
        roleAssignments:
          - createdAt: '2026-02-26T19:50:41Z'
            message: 'Failed on 1/1 cluster(s): cluster test-unavailable-cluster-1772135440: namespaces "test-unavailable-cluster-1772135440" not found'
            name: test-unavailable-assignment
            reason: ApplicationFailed
            status: Error

              Unassigned Unassigned
              kurwang@redhat.com Kurtis Wang
              Derek Ho Derek Ho
              ACM QE Team
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: