Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-22182

Seccompprofile log-enricher-trace will stuck at “pending” status after setting enableLogEnricher to true

XMLWordPrintable

      Description of problem:

      After patching enableLogEnricher to true, when spod daemonset is ready, check the status of seccompprofile log-enricher-trace. The seccompprofile log-enricher-trace will stuck at pending status

      Version-Release number of selected component (if applicable):

      Security-profiles-operator-bundle-container-0.8.0-22

      How reproducible:

      ALways

      Steps to Reproduce:

      1. Install Security Profiles Operator
      2. Setting enableLogEnricher to true 
      $ oc -n openshift-security-profiles patch spod spod --type=merge -p '{"spec":{"enableLogEnricher":true}}' 

      Actual results:

      After patching enableLogEnricher to true, when spod daemonset is ready, check the status of seccompprofile log-enricher-trace. The seccompprofile log-enricher-trace will stuck at pending status
      2023-10-19T11:59:18.708701569Z E1019 11:59:18.708559  468506 seccompprofile.go:479] seccomp-spod "msg"="couldn't get current status" "error"="getting node status for matching: SecurityProfileNodeStatus.security-profiles-operator.x-k8s.io \"log-enricher-trace-xiyun-19-m1-lhg29-compute-0\" not found" "namespace"="openshift-security-profiles" "profile"="log-enricher-trace"
      2023-10-19T11:59:18.708804887Z E1019 11:59:18.708726  468506 controller.go:329]  "msg"="Reconciler error" "error"="getting status for installed SeccompProfile: getting node status for matching: SecurityProfileNodeStatus.security-profiles-operator.x-k8s.io \"log-enricher-trace-xiyun-19-m1-lhg29-compute-0\" not found" "SeccompProfile"={"name":"log-enricher-trace","namespace":"openshift-security-profiles"} "controller"="profile" "controllerGroup"="security-profiles-operator.x-k8s.io" "controllerKind"="SeccompProfile" "name"="log-enricher-trace" "namespace"="openshift-security-profiles" "reconcileID"="4d41ec9f-fd64-4e7f-8517-0e6f927ea478"

      Expected results:

      After patching enableLogEnricher to true, when spod daemonset is ready, check the status of seccompprofile log-enricher-trace. The seccompprofile log-enricher-trace will get installed quickly

      Additional info:

      logs are available at https://drive.google.com/drive/folders/19C2qxinvzyaXDbhkOF_j0b6-3EyIiwWr

            wenshen@redhat.com Vincent Shen
            xiyuan@redhat.com Xiaojie Yuan
            Xiaojie Yuan Xiaojie Yuan
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: