-
Bug
-
Resolution: Done
-
Major
-
MCE 2.2.Z
-
False
-
None
-
False
-
-
-
Important
-
No
Description of problem:
This problem was discovered when a user upgraded ACM 2.6 to 2.7 while the hypershift-preview feature was enabled.
2023-02-10T20:58:43.350Z ERROR manager manager/cli_download_install.go:28 failed to get the most current version of MCE CSV from multicluster-engine namespace {"error": "clusterserviceversions.operators.coreos.com is forbidden: User \"system:serviceaccount:multicluster-engine:hypershift-addon-manager-sa\" cannot list resource \"clusterserviceversions\" in API group \"operators.coreos.com\" in the namespace \"multicluster-engine\""}github.com/stolostron/hypershift-addon-operator/pkg/manager.EnableHypershiftCLIDownload /remote-source/hypershift-addon-operator/app/pkg/manager/cli_download_install.go:28github.com/stolostron/hypershift-addon-operator/pkg/manager.NewManagerCommand.func1 /remote-source/hypershift-addon-operator/app/pkg/manager/manager.go:131github.com/openshift/library-go/pkg/controller/controllercmd.(*ControllerBuilder).Run /remote-source/hypershift-addon-operator/app/vendor/github.com/openshift/library-go/pkg/controller/controllercmd/builder.go:311github.com/openshift/library-go/pkg/controller/controllercmd.(*ControllerCommandConfig).StartController /remote-source/hypershift-addon-operator/app/vendor/github.com/openshift/library-go/pkg/controller/controllercmd/cmd.go:294github.com/openshift/library-go/pkg/controller/controllercmd.(*ControllerCommandConfig).NewCommandWithContext.func1 /remote-source/hypershift-addon-operator/app/vendor/github.com/openshift/library-go/pkg/controller/controllercmd/cmd.go:137github.com/spf13/cobra.(*Command).execute /remote-source/hypershift-addon-operator/app/vendor/github.com/spf13/cobra/command.go:860github.com/spf13/cobra.(*Command).ExecuteC /remote-source/hypershift-addon-operator/app/vendor/github.com/spf13/cobra/command.go:974github.com/spf13/cobra.(*Command).Execute /remote-source/hypershift-addon-operator/app/vendor/github.com/spf13/cobra/command.go:902main.main /remote-source/hypershift-addon-operator/app/cmd/main.go:41runtime.main /usr/lib/golang/src/runtime/proc.go:250
The clusterrole had correct RBAC but it seems the hypershift addon manager pod was upgraded before the clusterrole was upgraded.
- apiGroups: - operators.coreos.com resources: - clusterserviceversions verbs: - get - list
One way to fix this problem is to have some re-tries on the CSV checking before giving up.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
- ...
Actual results:
Expected results:
Additional info:
- clones
-
-
- Closed
-
