Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-3334

Error trying to create for event in default namespace

    XMLWordPrintable

Details

    • False
    • None
    • False
    • NEW
    • VERIFIED
    • Log Collection - Sprint 228, Log Collection - Sprint 229

    Description

      Description of problem:

      CLO generates the following error when reconciling a cluster wide resource since it does not have permissions to generate events in the default namespace.

      2022-11-28T19:44:37.140421444Z E1128 19:44:37.140247       1 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"cluster-logging-metadata-reader.172bd64cfd91bf76", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"ClusterRoleBinding", Namespace:"", Name:"cluster-logging-metadata-reader", UID:"", APIVersion:"rbac.authorization.k8s.io/v1", ResourceVersion:"", FieldPath:""}, Reason:"GetObject", Message:"GetObject ClusterRoleBinding cluster-logging-metadata-reader", Source:v1.EventSource{Component:"clusterlogforwarder", Host:""}, FirstTimestamp:time.Date(2022, time.November, 28, 19, 28, 33, 30946678, time.Local), LastTimestamp:time.Date(2022, time.November, 28, 19, 44, 37, 72392651, time.Local), Count:16, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "cluster-logging-metadata-reader.172bd64cfd91bf76" is forbidden: User "system:serviceaccount:openshift-logging:cluster-logging-operator" cannot patch resource "events" in API group "" in the namespace "default"' (will not retry!)
      

      Version-Release number of selected component (if applicable):

      How reproducible:

      Always

      Steps to Reproduce:

      1. ...

      Actual results:

      Expected results:

      Additional info:

      Attachments

        Activity

          People

            jcantril@redhat.com Jeffrey Cantrill
            jcantril@redhat.com Jeffrey Cantrill
            Qiaoling Tang Qiaoling Tang
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: