Loading...

Details

Type: Bug
Resolution: Done
Priority: Blocker
Fix Version/s: fuse-7.8-GA
Affects Version/s: fuse-7.8-GA
Component/s: Fuse Online
Labels:
- verified

Fuse Progress Bar:

% %
Prod build version:
build3
Target Release:

fuse-7.8-GA
Git Pull Request:
https://github.com/syndesisio/syndesis/pull/9049, https://github.com/syndesisio/syndesis/pull/9052
Steps to Reproduce:
Hide

Install two syndesis at the same time on OCP 4.x.
Reproducer script:

docker run --entrypoint bash syndesis/syndesis-operator:1.11.0-20200903 -c "cat /usr/local/bin/syndesis-operator" > ./syndesis-operator chmod +x ./syndesis-operator wget https://raw.githubusercontent.com/syndesisio/fuse-online-install/1.11.x/default-cr.yml oc new-project syndesis oc new-project syndesis2 ./syndesis-operator install cluster ./syndesis-operator grant -u developer -n syndesis ./syndesis-operator grant -u developer -n syndesis2 ./syndesis-operator install operator -n syndesis ./syndesis-operator install operator -n syndesis2 ./syndesis-operator install app -n syndesis --custom-resource ./default-cr.yml ./syndesis-operator install app -n syndesis2 --custom-resource ./default-cr.yml

After that, in one namespace (syndesis or syndesis2) will be missing syndesis-jaeger pod and in the syndesis-operator will be following error:

E0903 10:49:00.542035 1 reflector.go:178] sigs.k8s.io/controller-runtime/pkg/cache/internal/informers_map.go:224: Failed to list *v1.PackageManifest: packagemanifests.packages.operators.coreos.com is forbidden: User "system:serviceaccount:syndesis:syndesis-operator" cannot list resource "packagemanifests" in API group "packages.operators.coreos.com" in the namespace "syndesis"
Show
Install two syndesis at the same time on OCP 4.x. Reproducer script: docker run --entrypoint bash syndesis/syndesis- operator :1.11.0-20200903 -c "cat /usr/local/bin/syndesis- operator " > ./syndesis- operator chmod +x ./syndesis- operator wget https: //raw.githubusercontent.com/syndesisio/fuse-online-install/1.11.x/ default -cr.yml oc new -project syndesis oc new -project syndesis2 ./syndesis- operator install cluster ./syndesis- operator grant -u developer -n syndesis ./syndesis- operator grant -u developer -n syndesis2 ./syndesis- operator install operator -n syndesis ./syndesis- operator install operator -n syndesis2 ./syndesis- operator install app -n syndesis --custom-resource ./ default -cr.yml ./syndesis- operator install app -n syndesis2 --custom-resource ./ default -cr.yml After that, in one namespace (syndesis or syndesis2) will be missing syndesis-jaeger pod and in the syndesis-operator will be following error: E0903 10:49:00.542035 1 reflector.go:178] sigs.k8s.io/controller-runtime/pkg/cache/internal/informers_map.go:224: Failed to list *v1.PackageManifest: packagemanifests.packages.operators.coreos.com is forbidden: User "system:serviceaccount:syndesis:syndesis- operator " cannot list resource "packagemanifests" in API group "packages.operators.coreos.com" in the namespace "syndesis"

SFDC Cases Counter:
SFDC Cases Links:

Description

During the test running, we noticed a problem when two Syndesis is installing at the same time. The syndesis-jaeger pod in one namespace is not able to appear and the operator pod has the following error in the log:

E0903 10:49:00.542035       1 reflector.go:178] sigs.k8s.io/controller-runtime/pkg/cache/internal/informers_map.go:224: Failed to list *v1.PackageManifest: packagemanifests.packages.operators.coreos.com is forbidden: User "system:serviceaccount:syndesis:syndesis-operator" cannot list resource "packagemanifests" in API group "packages.operators.coreos.com" in the namespace "syndesis"

When I have tried to install two syndesis sequentially, everything works.

Probably the issue is caused by `syndesis-operator:install-olm` clusterrolebindings which contains information about one namespace but both syndesis installations are writing to it at the same time.

- apiVersion: rbac.authorization.k8s.io/v1                                                               
  kind: ClusterRoleBinding                                                               
  metadata:                                                               
    labels:                                                               
      app: syndesis                                                               
      syndesis.io/app: syndesis                                                               
      syndesis.io/component: syndesis-operator                                                               
      syndesis.io/type: operator                                                               
    name: syndesis-operator:install-olm                                                               
  subjects:                                                               
  - kind: ServiceAccount                                                               
    name: syndesis-operator                                                               
    namespace: {{ .Namespace }}

Maybe if both installations create their own closterrolebindings (e.g. syndesis-<namespace>-operator:install-olm), the issue will be gone.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

Screenshot from 2020-09-02 23-46-37.png
280 kB
2020/09/03 7:01 AM

Issue Links

causes

ENTESB-14780 After replacing ClusterRoleBindings to RoleBindings, Kafka autodiscovery and PublicAPI don't work

Done

More Syndesis are not able to be installed at the same time

Details

Description

Attachments

Attachments

Issue Links

Activity

People

Dates