Uploaded image for project: 'must-gather'
  1. must-gather
  2. MG-65

The ClusterRole missing permissions for the clusterversions

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • Product / Portfolio Work
    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • OAPE Sprint 276
    • 1

      • The ClusterRole defined in the must-gather-operator CSV file is missing the get, list, and watch permissions for the clusterversions resource in the config.openshift.io API group.

      Add a clusterversions permission rule
      Add a new rule block to the existing rules under clusterPermissions to grant the must-gather-operator ServiceAccount get, list, and watch permissions on the clusterversions resource.

       

      err:

      E0820 05:45:06.354827       1 reflector.go:158] "Unhandled Error" err="pkg/mod/k8s.io/client-go@v0.31.1/tools/cache/reflector.go:243: Failed to watch *v1.ClusterVersion: failed to list *v1.ClusterVersion: clusterversions.config.openshift.io is forbidden: User \"system:serviceaccount:must-gather-operator:must-gather-operator\" cannot list resource \"clusterversions\" in API group \"config.openshift.io\" at the cluster scope" logger="UnhandledError" 

              rhn-support-jitli Keenon Lee
              rhn-support-jitli Keenon Lee
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: