-
Bug
-
Resolution: Done
-
Blocker
-
None
-
fuse-7.5.1-GA
Installing Fuse Online 7.5.0 through the Operatorhub fails.
The operator remains in installing state until additional permissions are added.
Instructions to reproduce:
- provision an ocp 4.2 cluster (we used https://rhpds.redhat.com/ and created a workshop -> ocp 4.2 workshop cluster)
- create namespace
- folow the pre installation instruction on the fuse online operator page:
oc create secret docker-registry syndesis-pull-secret --docker-server=registry.redhat.io --docker-username=$MINISHIFT_USERNAME --docker-password=$MINISHIFT_PASSWORD --docker-email=$EMAIL - install fuse online operator (this step succeed)
oc secrets link syndesis-operator syndesis-pull-secret --for=pull- create an instance of fuse online from the operator
the operator log will have this error:
{"level":"info","ts":1574105456.7138872,"logger":"action","msg":"Installing Syndesis resource","type":"install","name":"app"}
{"level":"info","ts":1574105462.968916,"logger":"action","msg":"Failed to create or replace resource","type":"install","kind":"Role","name":"syndesis-editor","namespace":"fuse-online"}
{"level":"error","ts":1574105462.9689581,"logger":"controller","msg":"Error reconciling","action":"*action.installAction","phase":"Installing","error":"roles.rbac.authorization.k8s.io \"syndesis-editor\" is forbidden: user \"system:serviceaccount:fuse-online:syndesis-operator\" (groups=[\"system:serviceaccounts\" \"system:serviceaccounts:fuse-online\" \"system:authenticated\"]) is attempting to grant RBAC permissions not currently held:\n{APIGroups:[\"\"], Resources:[\"deploymentconfigs/finalizers\"], Verbs:[\"get\" \"list\" \"create\" \"update\" \"delete\" \"deletecollection\" \"watch\" \"patch\"]}\n{APIGroups:[\"apps.openshift.io\"], Resources:[\"deploymentconfigs/finalizers\"], Verbs:[\"get\" \"list\" \"create\" \"update\" \"delete\" \"deletecollection\" \"watch\" \"patch\"]}","stacktrace":"github.com/go-logr/zapr.(*zapLogger).Error\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/github.com/go-logr/zapr/zapr.go:128\ngithub.com/syndesisio/syndesis/install/operator/pkg/controller/syndesis.(*ReconcileSyndesis).Reconcile\n\tsrc/github.com/syndesisio/syndesis/install/operator/pkg/controller/syndesis/syndesis_controller.go:120\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:215\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:158\nk8s.io/apimachinery/pkg/util/wait.JitterUntil.func1\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:134\nk8s.io/apimachinery/pkg/util/wait.Until\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:88"}
{"level":"error","ts":1574105462.9690359,"logger":"kubebuilder.controller","msg":"Reconciler error","controller":"syndesis-controller","request":"fuse-online/app","error":"roles.rbac.authorization.k8s.io \"syndesis-editor\" is forbidden: user \"system:serviceaccount:fuse-online:syndesis-operator\" (groups=[\"system:serviceaccounts\" \"system:serviceaccounts:fuse-online\" \"system:authenticated\"]) is attempting to grant RBAC permissions not currently held:\n{APIGroups:[\"\"], Resources:[\"deploymentconfigs/finalizers\"], Verbs:[\"get\" \"list\" \"create\" \"update\" \"delete\" \"deletecollection\" \"watch\" \"patch\"]}\n{APIGroups:[\"apps.openshift.io\"], Resources:[\"deploymentconfigs/finalizers\"], Verbs:[\"get\" \"list\" \"create\" \"update\" \"delete\" \"deletecollection\" \"watch\" \"patch\"]}","stacktrace":"github.com/go-logr/zapr.(*zapLogger).Error\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/github.com/go-logr/zapr/zapr.go:128\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:217\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:158\nk8s.io/apimachinery/pkg/util/wait.JitterUntil.func1\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:134\nk8s.io/apimachinery/pkg/util/wait.Until\n\tsrc/github.com/syndesisio/syndesis/install/operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:88"}
and the fuse Online instance remains in state "installing" forever.
- blocks
-
-
- Closed
-
- is incorporated by
-
ENTESB-12304 Urgent 7.5 updates to resolve blocking issues
-
- Closed
-
