-
Bug
-
Resolution: Won't Do
-
Major
-
3.4.0.GA
-
Team A: Dashboard, devfile and plugin registries, open-vsx, operator + chectl/dsc, devfile-converter, configbump + traefik, image-puller, server, gateway, authentication, try-in-web-ide action, telemetry, Team B: DevWorkspace + Operator, Web Terminal + Operator, editors/IDEs + built-in vscode extensions, Universal Developer Image, machine-exec, dev environment config
-
None
-
False
-
None
-
False
-
Resolved as Won't Do since the fix is promoted with 3.4.0 and DWO 0.18.1
-
Workaround Exists
-
-
-
Description of problem:
It was not possible to remove workspace with container build capability created in DS 3.3.0 and failed to remove, after an upgrade to DS 3.4.0
Prerequisites (if any, like setup, operators/versions):
Steps to Reproduce
- Deploy DS 3.3.0 with "disableContainerBuildCapabilities: false".
- Create Empty workspace, start it.
- Set "disableContainerBuildCapabilities: true".
- Stop and delete Empty workspace.
- Observe workspace stuck on removal.
- Upgrade DS to 3.4.0.
- Try to remove Empty workspace again.
Actual results:
Workspace continue shown as being removed:
There is an error in devworkspace controller manager logs:
{"level":"error","ts":1675640865.3453977,"logger":"controllers.DevWorkspace","msg":"Failed to finalize workspace ServiceAccount","Request.Namespace":"admin-devspaces","Request.Name":"empty-hj4b","devworkspace_id":"workspace6c442248213a4d6b","error":"operator does not have permissions to get the 'container-build' SecurityContextConstraints","stacktrace":"github.com/devfile/devworkspace-operator/controllers/workspace.(*DevWorkspaceReconciler).finalize\n\t/remote-source/app/controllers/workspace/finalize.go:73\ngithub.com/devfile/devworkspace-operator/controllers/workspace.(*DevWorkspaceReconciler).Reconcile\n\t/remote-source/app/controllers/workspace/devworkspace_controller.go:146\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:298\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:253\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/remote-source/app/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:214"}
devworkspace-controller-manager-cd56f9fcc-pml8d-devworkspace-controller.log
Expected results:
Workspace is removed.
Reproducibility (Always/Intermittent/Only Once):
Build Details:
Additional info (Such as Logs, Screenshots, etc):
It was not possible to remove workspace with container build capability after setting up "disableContainerBuildCapabilities: true" in DS 3.4.0.RC-02-03 neither.
- relates to
-
CRW-3935 It was not possible to remove workspace with container build capability in DS 3.4.0 + DWO 0.18.1 after disabling container build capability
- Resolved