- The ClusterRole defined in the must-gather-operator CSV file is missing the get, list, and watch permissions for the clusterversions resource in the config.openshift.io API group.
Add a clusterversions permission rule
Add a new rule block to the existing rules under clusterPermissions to grant the must-gather-operator ServiceAccount get, list, and watch permissions on the clusterversions resource.
err:
E0820 05:45:06.354827 1 reflector.go:158] "Unhandled Error" err="pkg/mod/k8s.io/client-go@v0.31.1/tools/cache/reflector.go:243: Failed to watch *v1.ClusterVersion: failed to list *v1.ClusterVersion: clusterversions.config.openshift.io is forbidden: User \"system:serviceaccount:must-gather-operator:must-gather-operator\" cannot list resource \"clusterversions\" in API group \"config.openshift.io\" at the cluster scope" logger="UnhandledError"
- duplicates
-
MG-60 Cache unhandled error due to operator requesting ClusterVersion object
-
- Closed
-
- links to