Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-1971

ZTP - operators cannot be deployed with "status" related errors in subscriptions policy

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Important
    • None
    • None
    • None
    • Proposed
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      Subscriptions CR fails to be applied on spoke with following error:
      `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;

      Version-Release number of selected component (if applicable):

      ACM 2.6.2

      How reproducible:

      100%

      Steps to Reproduce:

      1. Install latest ACM 2.6.2 on hub cluster (not sure if ACM version matters)
      2. Deploy latest 4.12 spoke cluster via ZTP 
      3. Wait for policies to be compliant 

      Actual results:

      subscriptions-policy is not compliant with following error:
      
            Message:         NonCompliant; violation - subscriptions [sriov-network-operator-subscription] in namespace openshift-sriov-network-operator is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; notification - namespaces [openshift-sriov-network-operator] found as specified, therefore this Object template is compliant; notification - operatorgroups [sriov-network-operators] in namespace openshift-sriov-network-operator found as specified, therefore this Object template is compliant; violation - operators [sriov-network-operator.openshift-sriov-network-operator] is missing, and cannot be created, reason: `ValidationError(Operator.status.components): missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`; violation - subscriptions [ptp-operator-subscription] in namespace openshift-ptp is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; notification - namespaces [openshift-ptp] found as specified, therefore this Object template is compliant; notification - operatorgroups [ptp-operators] in namespace openshift-ptp found as specified, therefore this Object template is compliant; violation - operators [ptp-operator.openshift-ptp] is missing, and cannot be created, reason: `ValidationError(Operator.status.components): missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`; notification - namespaces [openshift-logging] found as specified, therefore this Object template is compliant; notification - operatorgroups [cluster-logging] in namespace openshift-logging found as specified, therefore this Object template is compliant; violation - subscriptions [cluster-logging] in namespace openshift-logging is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; violation - operators [cluster-logging.openshift-logging] is missing, and cannot be created, reason: `ValidationError(Operator.status.components): missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`; notification - namespaces [openshift-local-storage] found as specified, therefore this Object template is compliant; notification - operatorgroups [openshift-local-storage] in namespace openshift-local-storage found as specified, therefore this Object template is compliant; violation - subscriptions [local-storage-operator] in namespace openshift-local-storage is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; violation - operators [local-storage-operator.openshift-local-storage] is missing, and cannot be created, reason: `ValidationError(Operator.status.components): missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`; notification - namespaces [vran-acceleration-operators] found as specified, therefore this Object template is compliant; notification - operatorgroups [vran-operators] in namespace vran-acceleration-operators found as specified, therefore this Object template is compliant; violation - subscriptions [sriov-fec-subscription] in namespace vran-acceleration-operators is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; notification - namespaces [amq-router] found as specified, therefore this Object template is compliant; notification - operatorgroups [amq-router] in namespace amq-router found as specified, therefore this Object template is compliant; violation - subscriptions [amq7-interconnect-subscription] in namespace amq-router is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; violation - subscriptions [bare-metal-event-relay-subscription] in namespace openshift-bare-metal-events is missing, and cannot be created, reason: `ValidationError(Subscription.status): missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`; notification - namespaces [openshift-bare-metal-events] found as specified, therefore this Object template is compliant; notification - operatorgroups [bare-metal-event-relay-group] in namespace openshift-bare-metal-events found as specified, therefore this Object template is compliant
      

      Expected results:

      subscriptions policy applies successfully and operators are installed

      Additional info:

      subscription policy:
      
      kni@registry.kni-qe-18 ~]$ oc get policies -n ocp-edge87 ztp-install.ocp-edge87-common-subscriptions-policy-z74m7 -o yaml
      apiVersion: policy.open-cluster-management.io/v1
      kind: Policy
      metadata:
        annotations:
          cluster-group-upgrades-operator/rname: ocp-edge87-common-subscriptions-policy
          kubectl.kubernetes.io/last-applied-configuration: |
            {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"2"},"labels":{"app.kubernetes.io/instance":"policies"},"name":"common-subscriptions-policy","namespace":"ztp-common"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"common-subscriptions-policy-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"sriov-network-operator-subscription","namespace":"openshift-sriov-network-operator"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"sriov-network-operator","source":"redhat-operators","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"name":"openshift-sriov-network-operator"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"sriov-network-operators","namespace":"openshift-sriov-network-operator"},"spec":{"targetNamespaces":["openshift-sriov-network-operator"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"sriov-network-operator.openshift-sriov-network-operator"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-sriov-network-operator"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-sriov-network-operator"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-sriov-network-operator"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"ptp-operator-subscription","namespace":"openshift-ptp"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"ptp-operator","source":"redhat-operators","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"labels":{"openshift.io/cluster-monitoring":"true"},"name":"openshift-ptp"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"ptp-operators","namespace":"openshift-ptp"},"spec":{"targetNamespaces":["openshift-ptp"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"ptp-operator.openshift-ptp"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-ptp"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-ptp"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-ptp"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"name":"openshift-logging"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"cluster-logging","namespace":"openshift-logging"},"spec":{"targetNamespaces":["openshift-logging"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"cluster-logging","namespace":"openshift-logging"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"cluster-logging","source":"redhat-operators","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"cluster-logging.openshift-logging"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-logging"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-logging"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-logging"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"name":"openshift-local-storage"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"openshift-local-storage","namespace":"openshift-local-storage"},"spec":{"targetNamespaces":["openshift-local-storage"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"local-storage-operator","namespace":"openshift-local-storage"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"local-storage-operator","source":"redhat-operators","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"local-storage-operator.openshift-local-storage"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-local-storage"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-local-storage"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-local-storage"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"name":"vran-acceleration-operators"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"vran-operators","namespace":"vran-acceleration-operators"},"spec":{"targetNamespaces":["vran-acceleration-operators"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"sriov-fec-subscription","namespace":"vran-acceleration-operators"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"sriov-fec","source":"certified-operators","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"name":"amq-router"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"amq-router","namespace":"amq-router"},"spec":{"targetNamespaces":["amq-router"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"amq7-interconnect-subscription","namespace":"amq-router"},"spec":{"channel":"1.10.x","installPlanApproval":"Manual","name":"amq7-interconnect-operator","source":"amq-operator","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"name":"bare-metal-event-relay-subscription","namespace":"openshift-bare-metal-events"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"bare-metal-event-relay","source":"redhat-operators","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"labels":{"openshift.io/cluster-monitoring":"true"},"name":"openshift-bare-metal-events"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"bare-metal-event-relay-group","namespace":"openshift-bare-metal-events"},"spec":{"targetNamespaces":["openshift-bare-metal-events"]}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
          policy.open-cluster-management.io/categories: CM Configuration Management
          policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
          policy.open-cluster-management.io/standards: NIST SP 800-53
          ran.openshift.io/ztp-deploy-wave: "2"
        creationTimestamp: "2022-10-03T17:31:28Z"
        generation: 1
        labels:
          app: openshift-cluster-group-upgrades
          app.kubernetes.io/instance: policies
          openshift-cluster-group-upgrades/clusterGroupUpgrade: ocp-edge87
          openshift-cluster-group-upgrades/parentPolicyName: common-subscriptions-policy
          policy.open-cluster-management.io/cluster-name: ocp-edge87
          policy.open-cluster-management.io/cluster-namespace: ocp-edge87
          policy.open-cluster-management.io/root-policy: ztp-install.ocp-edge87-common-subscriptions-policy-z74m7
          velero.io/exclude-from-backup: "true"
        name: ztp-install.ocp-edge87-common-subscriptions-policy-z74m7
        namespace: ocp-edge87
        resourceVersion: "31418667"
        uid: 9b97f656-94f5-4aef-838c-13d178f0949f
      spec:
        disabled: false
        policy-templates:
        - objectDefinition:
            apiVersion: policy.open-cluster-management.io/v1
            kind: ConfigurationPolicy
            metadata:
              name: ocp-edge87-common-subscriptions-policy-config-lqlp4
            spec:
              evaluationInterval:
                compliant: 10m
                noncompliant: 10s
              namespaceselector:
                exclude:
                - kube-*
                include:
                - '*'
              object-templates:
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: sriov-network-operator-subscription
                    namespace: openshift-sriov-network-operator
                  spec:
                    channel: stable
                    installPlanApproval: Manual
                    name: sriov-network-operator
                    source: redhat-operators
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    annotations:
                      workload.openshift.io/allowed: management
                    name: openshift-sriov-network-operator
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: sriov-network-operators
                    namespace: openshift-sriov-network-operator
                  spec:
                    targetNamespaces:
                    - openshift-sriov-network-operator
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: Operator
                  metadata:
                    name: sriov-network-operator.openshift-sriov-network-operator
                  status:
                    components:
                      refs:
                      - conditions:
                        - status: "False"
                          type: CatalogSourcesUnhealthy
                        kind: Subscription
                        namespace: openshift-sriov-network-operator
                      - conditions:
                        - status: "True"
                          type: Installed
                        kind: InstallPlan
                        namespace: openshift-sriov-network-operator
                      - conditions:
                        - reason: InstallSucceeded
                          status: "True"
                          type: Succeeded
                        kind: ClusterServiceVersion
                        namespace: openshift-sriov-network-operator
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: ptp-operator-subscription
                    namespace: openshift-ptp
                  spec:
                    channel: stable
                    installPlanApproval: Manual
                    name: ptp-operator
                    source: redhat-operators
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    annotations:
                      workload.openshift.io/allowed: management
                    labels:
                      openshift.io/cluster-monitoring: "true"
                    name: openshift-ptp
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: ptp-operators
                    namespace: openshift-ptp
                  spec:
                    targetNamespaces:
                    - openshift-ptp
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: Operator
                  metadata:
                    name: ptp-operator.openshift-ptp
                  status:
                    components:
                      refs:
                      - conditions:
                        - status: "False"
                          type: CatalogSourcesUnhealthy
                        kind: Subscription
                        namespace: openshift-ptp
                      - conditions:
                        - status: "True"
                          type: Installed
                        kind: InstallPlan
                        namespace: openshift-ptp
                      - conditions:
                        - reason: InstallSucceeded
                          status: "True"
                          type: Succeeded
                        kind: ClusterServiceVersion
                        namespace: openshift-ptp
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    annotations:
                      workload.openshift.io/allowed: management
                    name: openshift-logging
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: cluster-logging
                    namespace: openshift-logging
                  spec:
                    targetNamespaces:
                    - openshift-logging
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: cluster-logging
                    namespace: openshift-logging
                  spec:
                    channel: stable
                    installPlanApproval: Manual
                    name: cluster-logging
                    source: redhat-operators
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: Operator
                  metadata:
                    name: cluster-logging.openshift-logging
                  status:
                    components:
                      refs:
                      - conditions:
                        - status: "False"
                          type: CatalogSourcesUnhealthy
                        kind: Subscription
                        namespace: openshift-logging
                      - conditions:
                        - status: "True"
                          type: Installed
                        kind: InstallPlan
                        namespace: openshift-logging
                      - conditions:
                        - reason: InstallSucceeded
                          status: "True"
                          type: Succeeded
                        kind: ClusterServiceVersion
                        namespace: openshift-logging
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    annotations:
                      workload.openshift.io/allowed: management
                    name: openshift-local-storage
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: openshift-local-storage
                    namespace: openshift-local-storage
                  spec:
                    targetNamespaces:
                    - openshift-local-storage
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: local-storage-operator
                    namespace: openshift-local-storage
                  spec:
                    channel: stable
                    installPlanApproval: Manual
                    name: local-storage-operator
                    source: redhat-operators
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: Operator
                  metadata:
                    name: local-storage-operator.openshift-local-storage
                  status:
                    components:
                      refs:
                      - conditions:
                        - status: "False"
                          type: CatalogSourcesUnhealthy
                        kind: Subscription
                        namespace: openshift-local-storage
                      - conditions:
                        - status: "True"
                          type: Installed
                        kind: InstallPlan
                        namespace: openshift-local-storage
                      - conditions:
                        - reason: InstallSucceeded
                          status: "True"
                          type: Succeeded
                        kind: ClusterServiceVersion
                        namespace: openshift-local-storage
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    name: vran-acceleration-operators
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: vran-operators
                    namespace: vran-acceleration-operators
                  spec:
                    targetNamespaces:
                    - vran-acceleration-operators
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: sriov-fec-subscription
                    namespace: vran-acceleration-operators
                  spec:
                    channel: stable
                    installPlanApproval: Manual
                    name: sriov-fec
                    source: certified-operators
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    name: amq-router
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: amq-router
                    namespace: amq-router
                  spec:
                    targetNamespaces:
                    - amq-router
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: amq7-interconnect-subscription
                    namespace: amq-router
                  spec:
                    channel: 1.10.x
                    installPlanApproval: Manual
                    name: amq7-interconnect-operator
                    source: amq-operator
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1alpha1
                  kind: Subscription
                  metadata:
                    name: bare-metal-event-relay-subscription
                    namespace: openshift-bare-metal-events
                  spec:
                    channel: stable
                    installPlanApproval: Manual
                    name: bare-metal-event-relay
                    source: redhat-operators
                    sourceNamespace: openshift-marketplace
                  status:
                    state: AtLatestKnown
              - complianceType: musthave
                objectDefinition:
                  apiVersion: v1
                  kind: Namespace
                  metadata:
                    labels:
                      openshift.io/cluster-monitoring: "true"
                    name: openshift-bare-metal-events
              - complianceType: musthave
                objectDefinition:
                  apiVersion: operators.coreos.com/v1
                  kind: OperatorGroup
                  metadata:
                    name: bare-metal-event-relay-group
                    namespace: openshift-bare-metal-events
                  spec:
                    targetNamespaces:
                    - openshift-bare-metal-events
              remediationAction: inform
              severity: low
        remediationAction: enforce
      status:
        compliant: NonCompliant
        details:
        - compliant: NonCompliant
          history:
          - eventName: ztp-install.ocp-edge87-common-subscriptions-policy-z74m7.171a9f9f38efbfe7
            lastTimestamp: "2022-10-03T17:35:18Z"
            message: 'NonCompliant; violation - subscriptions [sriov-network-operator-subscription]
              in namespace openshift-sriov-network-operator is missing, and cannot be created,
              reason: `ValidationError(Subscription.status): missing required field "lastUpdated"
              in com.coreos.operators.v1alpha1.Subscription.status`; notification - namespaces
              [openshift-sriov-network-operator] found as specified, therefore this Object
              template is compliant; notification - operatorgroups [sriov-network-operators]
              in namespace openshift-sriov-network-operator found as specified, therefore
              this Object template is compliant; violation - operators [sriov-network-operator.openshift-sriov-network-operator]
              is missing, and cannot be created, reason: `ValidationError(Operator.status.components):
              missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              violation - subscriptions [ptp-operator-subscription] in namespace openshift-ptp
              is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              notification - namespaces [openshift-ptp] found as specified, therefore this
              Object template is compliant; notification - operatorgroups [ptp-operators]
              in namespace openshift-ptp found as specified, therefore this Object template
              is compliant; violation - operators [ptp-operator.openshift-ptp] is missing,
              and cannot be created, reason: `ValidationError(Operator.status.components):
              missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              notification - namespaces [openshift-logging] found as specified, therefore
              this Object template is compliant; notification - operatorgroups [cluster-logging]
              in namespace openshift-logging found as specified, therefore this Object template
              is compliant; violation - subscriptions [cluster-logging] in namespace openshift-logging
              is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              violation - operators [cluster-logging.openshift-logging] is missing, and
              cannot be created, reason: `ValidationError(Operator.status.components): missing
              required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              notification - namespaces [openshift-local-storage] found as specified, therefore
              this Object template is compliant; notification - operatorgroups [openshift-local-storage]
              in namespace openshift-local-storage found as specified, therefore this Object
              template is compliant; violation - subscriptions [local-storage-operator]
              in namespace openshift-local-storage is missing, and cannot be created, reason:
              `ValidationError(Subscription.status): missing required field "lastUpdated"
              in com.coreos.operators.v1alpha1.Subscription.status`; violation - operators
              [local-storage-operator.openshift-local-storage] is missing, and cannot be
              created, reason: `ValidationError(Operator.status.components): missing required
              field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              notification - namespaces [vran-acceleration-operators] found as specified,
              therefore this Object template is compliant; notification - operatorgroups
              [vran-operators] in namespace vran-acceleration-operators found as specified,
              therefore this Object template is compliant; violation - subscriptions [sriov-fec-subscription]
              in namespace vran-acceleration-operators is missing, and cannot be created,
              reason: `ValidationError(Subscription.status): missing required field "lastUpdated"
              in com.coreos.operators.v1alpha1.Subscription.status`; notification - namespaces
              [amq-router] found as specified, therefore this Object template is compliant;
              notification - operatorgroups [amq-router] in namespace amq-router found as
              specified, therefore this Object template is compliant; violation - subscriptions
              [amq7-interconnect-subscription] in namespace amq-router is missing, and cannot
              be created, reason: `ValidationError(Subscription.status): missing required
              field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              violation - subscriptions [bare-metal-event-relay-subscription] in namespace
              openshift-bare-metal-events is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              notification - namespaces [openshift-bare-metal-events] found as specified,
              therefore this Object template is compliant; notification - operatorgroups
              [bare-metal-event-relay-group] in namespace openshift-bare-metal-events found
              as specified, therefore this Object template is compliant'
          - eventName: ztp-install.ocp-edge87-common-subscriptions-policy-z74m7.171a9f83b1e16a0c
            lastTimestamp: "2022-10-03T17:33:20Z"
            message: 'NonCompliant; violation - subscriptions [sriov-network-operator-subscription]
              in namespace openshift-sriov-network-operator is missing, and cannot be created,
              reason: `ValidationError(Subscription.status): missing required field "lastUpdated"
              in com.coreos.operators.v1alpha1.Subscription.status`; violation - namespaces
              [openshift-sriov-network-operator] was missing, and was created successfully;
              violation - operatorgroups [sriov-network-operators] in namespace openshift-sriov-network-operator
              was missing, and was created successfully; violation - operators [sriov-network-operator.openshift-sriov-network-operator]
              is missing, and cannot be created, reason: `ValidationError(Operator.status.components):
              missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              violation - subscriptions [ptp-operator-subscription] in namespace openshift-ptp
              is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              violation - namespaces [openshift-ptp] was missing, and was created successfully;
              violation - operatorgroups [ptp-operators] in namespace openshift-ptp was
              missing, and was created successfully; violation - operators [ptp-operator.openshift-ptp]
              is missing, and cannot be created, reason: `ValidationError(Operator.status.components):
              missing required field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              violation - namespaces [openshift-logging] was missing, and was created successfully;
              violation - operatorgroups [cluster-logging] in namespace openshift-logging
              was missing, and was created successfully; violation - subscriptions [cluster-logging]
              in namespace openshift-logging is missing, and cannot be created, reason:
              `ValidationError(Subscription.status): missing required field "lastUpdated"
              in com.coreos.operators.v1alpha1.Subscription.status`; violation - operators
              [cluster-logging.openshift-logging] is missing, and cannot be created, reason:
              `ValidationError(Operator.status.components): missing required field "labelSelector"
              in com.coreos.operators.v1.Operator.status.components`; violation - namespaces
              [openshift-local-storage] was missing, and was created successfully; violation
              - operatorgroups [openshift-local-storage] in namespace openshift-local-storage
              was missing, and was created successfully; violation - subscriptions [local-storage-operator]
              in namespace openshift-local-storage is missing, and cannot be created, reason:
              `ValidationError(Subscription.status): missing required field "lastUpdated"
              in com.coreos.operators.v1alpha1.Subscription.status`; violation - operators
              [local-storage-operator.openshift-local-storage] is missing, and cannot be
              created, reason: `ValidationError(Operator.status.components): missing required
              field "labelSelector" in com.coreos.operators.v1.Operator.status.components`;
              violation - namespaces [vran-acceleration-operators] was missing, and was
              created successfully; violation - operatorgroups [vran-operators] in namespace
              vran-acceleration-operators was missing, and was created successfully; violation
              - subscriptions [sriov-fec-subscription] in namespace vran-acceleration-operators
              is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              violation - namespaces [amq-router] was missing, and was created successfully;
              violation - operatorgroups [amq-router] in namespace amq-router was missing,
              and was created successfully; violation - subscriptions [amq7-interconnect-subscription]
              in namespace amq-router is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              violation - subscriptions [bare-metal-event-relay-subscription] in namespace
              openshift-bare-metal-events is missing, and cannot be created, reason: `ValidationError(Subscription.status):
              missing required field "lastUpdated" in com.coreos.operators.v1alpha1.Subscription.status`;
              violation - namespaces [openshift-bare-metal-events] was missing, and was
              created successfully; violation - operatorgroups [bare-metal-event-relay-group]
              in namespace openshift-bare-metal-events was missing, and was created successfully'
          templateMeta:
            creationTimestamp: null
            name: ocp-edge87-common-subscriptions-policy-config-lqlp4
      

       

       

       

       

       

       

              mprahl Matthew Prahl
              rhn-support-yliu1 Yang Liu
              None
              None
              Yang Liu Yang Liu
              None
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: