Uploaded image for project: 'Service Binding'
  1. Service Binding
  2. APPSVC-1135

Unable to retrieve ClusterWorkloadResourceMapping on Dev Sandbox

XMLWordPrintable

    • False
    • None
    • False
    • Hide
      Before this update, users of the Developer Sandbox did not have sufficient permissions to read `ClusterWorkloadResourceMapping` resources. As a result, {servicebinding-title} prevented all service bindings from being successful. With this update, the {servicebinding-title} now includes the appropriate role-based access control (RBAC) rules for any authenticated subject including the Developer Sandbox users. These RBAC rules allow the {servicebinding-title} to `get`, `list`, and `watch` the `ClusterWorkloadResourceMapping` resources for the Developer Sandbox users and to process service bindings successfully.
      Show
      Before this update, users of the Developer Sandbox did not have sufficient permissions to read `ClusterWorkloadResourceMapping` resources. As a result, {servicebinding-title} prevented all service bindings from being successful. With this update, the {servicebinding-title} now includes the appropriate role-based access control (RBAC) rules for any authenticated subject including the Developer Sandbox users. These RBAC rules allow the {servicebinding-title} to `get`, `list`, and `watch` the `ClusterWorkloadResourceMapping` resources for the Developer Sandbox users and to process service bindings successfully.
    • AppSvc Sprint 220, AppSvc Sprint 221

      Description of problem:

      With v1.1.0 installed on the OpenShift Developer Sandbox, SBO is unable to process SB resources.

      Unable to retrieve ClusterWorkloadResourceMapping for type "apps/v1, Resource=deployments"
      

      This is what SBO log shows:

      {"level":"info","ts":1655385708.547445,"logger":"controllers.ServiceBinding","msg":"Reconciling","serviceBinding":"pmacik-dev/spring-petclinic-postgresql"}
      {"level":"info","ts":1655385708.5955305,"logger":"controllers.ServiceBinding","msg":"Done","serviceBinding":"pmacik-dev/spring-petclinic-postgresql","retry":true,"error":"Unable to retrieve ClusterWorkloadResourceMapping for type \"apps/v1, Resource=deployments\""}
      {"level":"error","ts":1655385708.5955698,"logger":"controller.servicebinding","msg":"Reconciler error","reconciler group":"binding.operators.coreos.com","reconciler kind":"ServiceBinding","name":"spring-petclinic-postgresql","namespace":"pmacik-dev","error":"Unable to retrieve ClusterWorkloadResourceMapping for type \"apps/v1, Resource=deployments\"","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/remote-source/service-binding-operator/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"}
      

      This is what SB resource shows:

      apiVersion: binding.operators.coreos.com/v1alpha1
      kind: ServiceBinding
      metadata:
        annotations:
          kubectl.kubernetes.io/last-applied-configuration: |
            {"apiVersion":"binding.operators.coreos.com/v1alpha1","kind":"ServiceBinding","metadata":{"annotations":{},"name":"spring-petclinic-postgresql","namespace":"pmacik-dev"},"spec":{"application":{"group":"apps","name":"spring-petclinic","resource":"deployments","version":"v1"},"services":[{"group":"apps","kind":"Deployment","name":"spring-petclinic-postgresql","version":"v1"}]}}
          servicebinding.io/requester: '{"username":"pmacik","uid":"8ef4abf9-b9fa-4f61-abc8-d029a6e9bb36","groups":["rhmi-developers","system:authenticated:oauth","system:authenticated"],"extra":{"scopes.authorization.openshift.io":["user:full"]}}'
        creationTimestamp: "2022-06-16T09:49:59Z"
        finalizers:
        - finalizer.servicebinding.openshift.io
        generation: 1
        name: spring-petclinic-postgresql
        namespace: pmacik-dev
        resourceVersion: "1211107144"
        uid: 9cb06781-6ada-40bd-8108-07f296e52f44
      spec:
        application:
          group: apps
          name: spring-petclinic
          resource: deployments
          version: v1
        bindAsFiles: true
        services:
        - group: apps
          kind: Deployment
          name: spring-petclinic-postgresql
          version: v1
      status:
        conditions:
        - lastTransitionTime: "2022-06-16T09:49:59Z"
          message: Unable to retrieve ClusterWorkloadResourceMapping for type "apps/v1,
            Resource=deployments"
          reason: ApplicationNotFound
          status: "False"
          type: InjectionReady
        - lastTransitionTime: "2022-06-16T09:49:59Z"
          message: Unable to retrieve ClusterWorkloadResourceMapping for type "apps/v1,
            Resource=deployments"
          reason: ProcessingError
          status: "False"
          type: Ready
        - lastTransitionTime: "2022-06-16T09:49:59Z"
          message: ""
          reason: DataCollected
          status: "True"
          type: CollectionReady
        secret: ""
      

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      1. Install SBO v1.1.0 from out-of-the-box redhat-operators catalog source into the Developer Sandbox.
      2. As a devsandbox user follow SBO Quickstart steps under one of the user's namespaces , e.g. <user>-dev.
      3. Observe ServiceBinding resource status.

      Actual results:

      Expected results:

      Reproducibility (Always/Intermittent/Only Once):

      Build Details:

      Additional info:

              pmacik@redhat.com Pavel Macik
              pmacik@redhat.com Pavel Macik
              Andy Sadler, Feny Mehta
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: