Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-22182

Seccompprofile log-enricher-trace will stuck at “pending” status after setting enableLogEnricher to true

    XMLWordPrintable

Details

    Description

      Description of problem:

      After patching enableLogEnricher to true, when spod daemonset is ready, check the status of seccompprofile log-enricher-trace. The seccompprofile log-enricher-trace will stuck at pending status

      Version-Release number of selected component (if applicable):

      Security-profiles-operator-bundle-container-0.8.0-22

      How reproducible:

      ALways

      Steps to Reproduce:

      1. Install Security Profiles Operator
      2. Setting enableLogEnricher to true 
      $ oc -n openshift-security-profiles patch spod spod --type=merge -p '{"spec":{"enableLogEnricher":true}}' 

      Actual results:

      After patching enableLogEnricher to true, when spod daemonset is ready, check the status of seccompprofile log-enricher-trace. The seccompprofile log-enricher-trace will stuck at pending status
      2023-10-19T11:59:18.708701569Z E1019 11:59:18.708559  468506 seccompprofile.go:479] seccomp-spod "msg"="couldn't get current status" "error"="getting node status for matching: SecurityProfileNodeStatus.security-profiles-operator.x-k8s.io \"log-enricher-trace-xiyun-19-m1-lhg29-compute-0\" not found" "namespace"="openshift-security-profiles" "profile"="log-enricher-trace"
      2023-10-19T11:59:18.708804887Z E1019 11:59:18.708726  468506 controller.go:329]  "msg"="Reconciler error" "error"="getting status for installed SeccompProfile: getting node status for matching: SecurityProfileNodeStatus.security-profiles-operator.x-k8s.io \"log-enricher-trace-xiyun-19-m1-lhg29-compute-0\" not found" "SeccompProfile"={"name":"log-enricher-trace","namespace":"openshift-security-profiles"} "controller"="profile" "controllerGroup"="security-profiles-operator.x-k8s.io" "controllerKind"="SeccompProfile" "name"="log-enricher-trace" "namespace"="openshift-security-profiles" "reconcileID"="4d41ec9f-fd64-4e7f-8517-0e6f927ea478"

      Expected results:

      After patching enableLogEnricher to true, when spod daemonset is ready, check the status of seccompprofile log-enricher-trace. The seccompprofile log-enricher-trace will get installed quickly

      Additional info:

      logs are available at https://drive.google.com/drive/folders/19C2qxinvzyaXDbhkOF_j0b6-3EyIiwWr

      Attachments

        Issue Links

          Activity

            People

              wenshen@redhat.com Vincent Shen
              xiyuan@redhat.com Xiaojie Yuan
              Xiaojie Yuan Xiaojie Yuan
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: