Uploaded image for project: 'Cloud Enablement'
  1. Cloud Enablement
  2. CLOUD-2836

[AMQ7] drain controller perms are not matching

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Critical Critical
    • None
    • AMQ72 1.0.0.GA
    • AMQ7
    • None

      The Role permissions from separate amq-broker-72-statefulset-clustered-controller.yaml and amq-broker-72-statefulset-clustered.yaml. The template file has insufficient perms for controller to work properly.

      https://github.com/jboss-container-images/jboss-amq-7-broker-openshift-image/blob/amq-broker-72-dev/templates/amq-broker-72-statefulset-clustered.yaml#L27-L53

      - apiVersion: rbac.authorization.k8s.io/v1beta1
        kind: Role
        metadata:
          name: ${APPLICATION_NAME}-role
          labels:
            app: ${APPLICATION_NAME}
        rules:
        - apiGroups:
          - ""
          resources:
          - endpoints
          verbs:
          - create
          - delete
          - deletecollection
          - get
          - list
          - patch
          - update
          - watch
        - apiGroups:
          - ""
          resources:
          - namespaces
          verbs:
          - get
          - list
      

      https://github.com/jboss-container-images/jboss-amq-7-broker-openshift-image/blob/amq-broker-72-dev/templates/amq-broker-72-statefulset-clustered-controller.yaml#L32-L76

      apiVersion: rbac.authorization.k8s.io/v1beta1
      kind: Role
      metadata:
        name: statefulset-drain-controller-role
        namespace: ${PROJECT_NAMESPACE}
        labels:
          app: statefulset-drain-controller-app
      rules:
      - apiGroups:
        - apps
        resources:
        - statefulsets
        verbs:
        - get
        - list
        - watch
      - apiGroups:
        - ""
        resources:
        - pods
        verbs:
        - get
        - list
        - watch
        - create
        - delete
        - patch
        - update
      - apiGroups:
        - ""
        resources:
        - persistentvolumeclaims
        verbs:
        - get
        - list
        - watch
        - delete
      - apiGroups:
        - ""
        resources:
        - events
        verbs:
        - get
        - list
        - watch
      

            rhn-support-rkieley Roderick Kieley
            dsimansk@redhat.com David Simansky
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: