Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2389

Istio resource Status updates do not handle change in namespace permissions

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Minor Minor
    • maistra-2.0.6
    • None
    • istiod
    • None
    • Sprint 4, Sprint 5, Sprint 6

      If the SMCP is configured to enable the status update of istio-io resources with their validation messages, and a dataplane namespace containing istio-io resources is then removed from the SMMR, this will result in numerous errors similar to

      2021-05-26T11:54:36.052981Z error status Encountered unexpected error when retrieving status for networking.istio.io/v1alpha3/virtualservices/27148237-c30c-3e97-82ca-1eefaee2ab08/vs-5b366c52-f001-3b89-8311-623c4ea3d050/44458056: virtualservices.networking.istio.io "vs-5b366c52-f001-3b89-8311-623c4ea3d050" is forbidden: User "system:serviceaccount:istio-system:istiod-service-account-full-install" cannot get resource "virtualservices" in API group "networking.istio.io" in the namespace "27148237-c30c-3e97-82ca-1eefaee2ab08"

        1. istiod-basic-5bb566c585-txv5m-discovery.log
          594 kB
        2. istiod-basic-79f5ccbf4f-kn7sn-discovery.log
          82 kB

            kconner@redhat.com Kevin Conner (Inactive)
            kconner@redhat.com Kevin Conner (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: