-
Bug
-
Resolution: Done
-
Undefined
-
None
-
4.13
-
None
-
No
-
False
-
This is a clone of issue OCPBUGS-8530. The following is the description of the original issue:
—
Description of problem:
The e2e-nutanix test run failed at bootstrap stage when testing the PR https://github.com/openshift/cloud-provider-nutanix/pull/7. Could reproduce the bootstrap failure with the manual testing to create a Nutanix OCP cluster with the latest nutanix-ccm image. time="2023-03-06T12:25:56-05:00" level=error msg="Bootstrap failed to complete: timed out waiting for the condition" time="2023-03-06T12:25:56-05:00" level=error msg="Failed to wait for bootstrapping to complete. This error usually happens when there is a problem with control plane hosts that prevents the control plane operators from creating the control plane." time="2023-03-06T12:25:56-05:00" level=warning msg="The bootstrap machine is unable to resolve API and/or API-Int Server URLs"
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
From the PR https://github.com/openshift/cloud-provider-nutanix/pull/7, trigger the e2e-nutanix test. The test will fail at bootstrap stage with the described errors.
Actual results:
The e2e-nutanix test run failed at bootstrapping with the errors: level=error msg=Bootstrap failed to complete: timed out waiting for the condition level=error msg=Failed to wait for bootstrapping to complete. This error usually happens when there is a problem with control plane hosts that prevents the control plane operators from creating the control plane.
Expected results:
The e2e-nutanix test will pass
Additional info:
Investigation showed the root cause was the Nutanix cloud-controller-manager pod did not have permission to get/list ConfigMap resource. The error logs from the Nutanix cloud-controller-manager pod: E0307 16:08:31.753165 1 reflector.go:140] pkg/provider/client.go:124: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:openshift-cloud-controller-manager:cloud-controller-manager" cannot list resource "configmaps" in API group "" at the cluster scope I0307 16:09:30.050507 1 reflector.go:257] Listing and watching *v1.ConfigMap from pkg/provider/client.go:124 W0307 16:09:30.052278 1 reflector.go:424] pkg/provider/client.go:124: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:openshift-cloud-controller-manager:cloud-controller-manager" cannot list resource "configmaps" in API group "" at the cluster scope E0307 16:09:30.052308 1 reflector.go:140] pkg/provider/client.go:124: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:openshift-cloud-controller-manager:cloud-controller-manager" cannot list resource "configmaps" in API group "" at the cluster scope
- clones
-
OCPBUGS-8530 Nutanix cloud-controller-manager pod not have permission to get/list ConfigMap
- Closed
- is blocked by
-
OCPBUGS-8530 Nutanix cloud-controller-manager pod not have permission to get/list ConfigMap
- Closed
- links to