-
Bug
-
Resolution: Done
-
Normal
-
None
-
None
-
None
-
Quality / Stability / Reliability
-
False
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description:
Installing a cluster on AzureGov using hive, after cluster installed, create additional machinepool on this cluster, hive-controllers will hit below error:
time="2021-10-12T04:52:33.154Z" level=error msg="could not generateMachineSets" controller=remotemachineset error="could not generate machinesets: compute pool not providing list of zones and failed to fetch list of zones: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to https://management.azure.com/subscriptions/512b9978-d441-4793-9ca7-50c2a7b978f7/providers/Microsoft.Compute/skus?api-version=2019-04-01: StatusCode=400 -- Original Error: adal: Refresh request failed. Status Code = '400'. Response body: {\"error\":\"invalid_request\",\"error_description\":\"AADSTS900382: Confidential Client is not supported in Cross Cloud request.\\r\\nTrace ID: f58d7933-1e19-43b7-8122-448ea2f81300\\r\\nCorrelation ID: d7956da4-798f-4509-bec3-54794b126855\\r\\nTimestamp: 2021-10-12 04:52:33Z\",\"error_codes\":[900382],\"timestamp\":\"2021-10-12 04:52:33Z\",\"trace_id\":\"f58d7933-1e19-43b7-8122-448ea2f81300\",\"correlation_id\":\"d7956da4-798f-4509-bec3-54794b126855\"} Endpoint https://login.microsoftonline.com/5a68018f-d232-42fc-a9d9-9c09dc84fbc4/oauth2/token?api-version=1.0" machinePool=default/lwanazgov-infra reconcileID=vbfr88mc
Version-Release number of selected component (if applicable):
Version: openshift/hive v1.1.16-107-ga27a4f7
How reproducible:
Always
Steps to Reproduce:
1.Create ClusterDeployment on AzureGov using hiveutil tool
2.Wait for cluster installed,Create a machinepool CR,
$ cat lwanazgov-infra.yaml
apiVersion: hive.openshift.io/v1
kind: MachinePool
metadata:
name: lwanazgov-infra
namespace: default
spec:
clusterDeploymentRef:
name: lwanazgov
name: infra
platform:
azure:
osDisk:
diskSizeGB: 512
type: Standard_D8s_v3
replicas: 2
$oc create -f lwanazgov-infra.yaml
3.Check machinepool CR status and remote machineset CR
Actual result:
Remote machines/nodes can be created
Expected result:
The remote machinesets, machines and nodes can be created
Additional info:
1. Hive-controller log attached
