Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-2577

FLP pods doesn't come up on the latest main bundle build

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Blocker Blocker
    • None
    • None
    • eBPF
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • NetObserv - Sprint 283
    • None
    • None
    • None

      Description of problem:

      FLP pods doesn't come up on the latest main bundle build
      $ build_info.sh
      OCP: 4.21.0-0.nightly-2026-01-19-212205
      NetObserv operator: v0.0.0-sha-main
      Loki: 0-click-loki
      Operator image: CREATED_DATE: "2026-01-20T17:39:29.08549766Z", tag: main
      eBPF-agent: CREATED_DATE: "2026-01-19T15:11:01.552901977Z", tag: main
      FLP: CREATED_DATE: "2026-01-19T15:05:22.136785541Z", tag: main
      ConsolePlugin: CREATED_DATE: "2026-01-20T19:08:55.80707713Z", tag: main
      
      

      Steps to Reproduce:

      1. Deploy using catalog/bundle main tag
      2. Create flowcollector
      3.
      

      Actual results:

      
      $ oc get pods
      NAME                                READY   STATUS    RESTARTS      AGE
      flowlogs-pipeline-bc49c67c9-cxkg4   0/1     Running   6 (58s ago)   8m58s
      flowlogs-pipeline-bc49c67c9-hcggs   0/1     Running   6 (58s ago)   8m58s
      flowlogs-pipeline-bc49c67c9-pq4ls   0/1     Running   6 (58s ago)   8m58s
      loki                                1/1     Running   0             9m53s
      netobserv-plugin-7cd586694c-qgt7s   1/1     Running   0             8m58s
      
      FLP logs show
      time=2026-01-20T21:04:25Z level=error msg=Cannot get dynamic config: configmaps "flowlogs-pipeline-config-dynamic" is forbidden: User "system:serviceaccount:netobserv:flowlogs-pipeline" cannot get resource "configmaps" in API group "" in the namespace "netobserv"
      time=2026-01-20T21:04:25Z level=info msg=Starting GRPC server with TLS component=ingest.GRPCProtobuf
      E0120 21:04:25.010371       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Service: services is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"services\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service"
      E0120 21:04:25.011083       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"pods\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Pod"
      E0120 21:04:25.011289       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"nodes\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node"
      E0120 21:04:25.864255       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Service: services is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"services\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service"
      E0120 21:04:25.888563       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"pods\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Pod"
      E0120 21:04:26.415941       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Node: nodes is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"nodes\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node"
      E0120 21:04:28.131668       1 reflector.go:205] "Failed to watch" err="failed to list *v1.Pod: pods is forbidden: User \"system:serviceaccount:netobserv:flowlogs-pipeline\" cannot list resource \"pods\" in API group \"\" at the cluster scope" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Pod"
      
      

      Expected results:

      
      

              Unassigned Unassigned
              rhn-support-memodi Mehul Modi
              None
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: