-
Bug
-
Resolution: Done
-
Critical
-
1.21.0, 1.22.0
-
None
-
None
Due to marin3r upgarde we needed to remove the v2 envoyconfigrevisions from the clusters (https://issues.redhat.com/browse/MGDAPI-3889). This removal now causing issues with restoration of 3scale namespace (in case it's removed either by accident or due to an attack). The error:
product reconciliation errors : failed installation of marin3r: envoyconfigrevisions.marin3r.3scale.net is forbidden: User "system:serviceaccount:redhat-rhoam-operator:rhmi-operator" cannot list resource "envoyconfigrevisions" in API Group "marin3r.3scale.net" in the namespace "redhat-rhoam-3scale"
The fix would be to allow rhmi-operator service account to work with these or remove the removal:
https://github.com/integr8ly/integreatly-operator/blob/master/pkg/products/marin3r/reconciler.go#L151
The removal should not be needed anymore because marin3r was upgraded across the fleet so there should not be any v2 envoyconfigrevisions anymore.
The issue was discovered while performing https://issues.redhat.com/browse/MGDAPI-4094 test case