-
Bug
-
Resolution: Not a Bug
-
Blocker
-
None
-
None
-
None
-
None
-
False
-
-
None
-
None
-
None
-
None
-
NetObserv - Sprint 283
-
None
-
None
-
None
Description of problem:
FLP pods doesn't come up on the latest main bundle build $ build_info.sh OCP: 4.21.0-0.nightly-2026-01-19-212205 NetObserv operator: v0.0.0-sha-main Loki: 0-click-loki Operator image: CREATED_DATE: "2026-01-20T17:39:29.08549766Z", tag: main eBPF-agent: CREATED_DATE: "2026-01-19T15:11:01.552901977Z", tag: main FLP: CREATED_DATE: "2026-01-19T15:05:22.136785541Z", tag: main ConsolePlugin: CREATED_DATE: "2026-01-20T19:08:55.80707713Z", tag: main
Steps to Reproduce:
1. Deploy using catalog/bundle main tag 2. Create flowcollector 3.
Actual results:
$ oc get pods NAME READY STATUS RESTARTS AGE flowlogs-pipeline-bc49c67c9-cxkg4 0/1 Running 6 (58s ago) 8m58s flowlogs-pipeline-bc49c67c9-hcggs 0/1 Running 6 (58s ago) 8m58s flowlogs-pipeline-bc49c67c9-pq4ls 0/1 Running 6 (58s ago) 8m58s loki 1/1 Running 0 9m53s netobserv-plugin-7cd586694c-qgt7s 1/1 Running 0 8m58s FLP logs show time=2026-01-20T21:04:25Z level=error msg=Cannot get dynamic config: configmaps "flowlogs-pipeline-config-dynamic" is forbidden: User "system:serviceaccount:netobserv:flowlogs-pipeline" cannot get resource "configmaps" in API group "" in the namespace "netobserv" time=2026-01-20T21:04:25Z level=info msg=Starting GRPC server with TLS component=ingest.GRPCProtobuf E0120 21:04:25.010371 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Service: services is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"services\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" E0120 21:04:25.011083 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"pods\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Pod" E0120 21:04:25.011289 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"nodes\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" E0120 21:04:25.864255 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Service: services is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"services\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" E0120 21:04:25.888563 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"pods\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Pod" E0120 21:04:26.415941 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"nodes\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" E0120 21:04:28.131668 1 reflector.go:205] "Failed to watch" err="failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"pods\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Pod"
Expected results: