Uploaded image for project: 'Openshift sandboxed containers'
  1. Openshift sandboxed containers
  2. KATA-3086

Upstream RBAC/manifests need to go downstream for peer-pods

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: High High
    • OSC 1.6.0
    • OSC 1.6.0
    • Operator
    • None
    • False
    • None
    • False
    • Kata Sprint #253, Kata Sprint #254
    • 0
    • 0

      Description

      Installing OSC 1.6.0-54 with peer-pods

      Actual result

      kataconfig install never starts the podvm image creation job

      Controller log eventually repeats: 

      W0531 14:18:30.430756       1 reflector.go:535] pkg/mod/k8s.io/client-go@v0.28.3/tools/cache/reflector.go:229: failed to list *v1.ClusterVersion: clusterversions.config.openshift.io is forbidden: User "system:serviceaccount:openshift-sandboxed-containers-operator:default" cannot list resource "clusterversions" in API group "config.openshift.io" at the cluster scope
E0531 14:18:30.430787       1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.28.3/tools/cache/reflector.go:229: Failed to watch *v1.ClusterVersion: failed to list *v1.ClusterVersion: clusterversions.config.openshift.io is forbidden: User "system:serviceaccount:openshift-sandboxed-containers-operator:default" cannot list resource "clusterversions" in API group "config.openshift.io" at the cluster scope

       

      controller.log

        1. controller.log
          153 kB

            bpradipt Pradipta Banerjee
            tbuskey-rh Tom Buskey
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: