-
Bug
-
Resolution: Done-Errata
-
Critical
-
None
-
Quality / Stability / Reliability
-
False
-
-
False
-
CLOSED
-
CNV Infra 219
-
Critical
-
None
Description of problem:
When installing CNV: v4.11.0-304, v4.11.0-306, and v4.11.0-307 HCO is failing to reconcile its state.
Version-Release number of selected component (if applicable):
CNV: v4.11.0-304
CNV: v4.11.0-307
How reproducible:
100
Steps to Reproduce:
1. Install CNV.
2. Check HCO.
3.
More Info:
HCO Condition Message:
KubeVirt is degraded: An error occurred during deployment: unable to create ClusterRole &ClusterRole{ObjectMeta:
,Rules:[]PolicyRule{PolicyRule
{Verbs:[get],APIGroups:[subresources.kubevirt.io],Resources:[virtualmachineinstances/console virtualmachineinstances/vnc virtualmachineinstances/guestosinfo virtualmachineinstances/filesystemlist virtualmachineinstances/userlist],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[update],APIGroups:[subresources.kubevirt.io],Resources:[virtualmachineinstances/pause virtualmachineinstances/unpause virtualmachineinstances/addvolume virtualmachineinstances/removevolume virtualmachineinstances/freeze virtualmachineinstances/unfreeze virtualmachineinstances/softreboot virtualmachineinstances/portforward],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[update],APIGroups:[subresources.kubevirt.io],Resources:[virtualmachines/start virtualmachines/stop virtualmachines/restart virtualmachines/addvolume virtualmachines/removevolume],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[get delete create update patch list watch deletecollection],APIGroups:[kubevirt.io],Resources:[virtualmachines virtualmachineinstances virtualmachineinstancepresets virtualmachineinstancereplicasets virtualmachineinstancemigrations],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[get delete create update patch list watch deletecollection],APIGroups:[snapshot.kubevirt.io],Resources:[virtualmachinesnapshots virtualmachinesnapshotcontents virtualmachinerestores],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[get delete create update patch list watch deletecollection],APIGroups:[flavor.kubevirt.io],Resources:[virtualmachineflavors virtualmachineclusterflavors],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[get delete create update patch list watch deletecollection],APIGroups:[pool.kubevirt.io],Resources:[virtualmachinepools],ResourceNames:[],NonResourceURLs:[],},PolicyRule
{Verbs:[get list watch],APIGroups:[migrations.kubevirt.io],Resources:[migrationpolicies],ResourceNames:[],NonResourceURLs:[],},},AggregationRule:nil,}: clusterroles.rbac.authorization.k8s.io "kubevirt.io:admin" is forbidden: user "system:serviceaccount:openshift-cnv:kubevirt-operator" (groups=["system:serviceaccounts" "system:serviceaccounts:openshift-cnv" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
Logs from hco-operator pod:
{"level":"error","ts":1652016328.255472,"logger":"controller_hyperconverged","msg":"Failed to update HCO Status","Request.Namespace":"openshift-cnv","Request.Name":"kubevirt-hyperconverged","error":"Operation cannot be fulfilled on hyperconvergeds.hco.kubevirt.io \"kubevirt-hyperconverged\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kubevirt/hyperconverged-cluster-operator/controllers/hyperconverged.(*ReconcileHyperConverged).updateHyperConverged\n\t/remote-source/app/controllers/hyperconverged/hyperconverged_controller.go:548\ngithub.com/kubevirt/hyperconverged-cluster-operator/controllers/hyperconverged.(*ReconcileHyperConverged).Reconcile\n\t/remote-source/app/controllers/hyperconverged/hyperconverged_controller.go:303\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:114\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:311\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"} {"level":"error","ts":1652016328.2555847,"logger":"controller.hyperconverged-controller","msg":"Reconciler error","name":"hco-controlled-cr-bda5152f-a88e-4ebc-92e1-0ad512c4bc7b","namespace":"openshift-cnv","error":"Operation cannot be fulfilled on hyperconvergeds.hco.kubevirt.io \"kubevirt-hyperconverged\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:227"}- external trackers