Details
Minor Description
As part of this slack thread.
Description of problem:
When SRE collects data using `oc adm inspect`; the collection reports an error on 'secrets' (see below). This is because of the way SRE manages our hosted platforms, and the SRE users (service accounts) are not 'true admins' and must impersonate admins to preform operations.
$ oc adm inspect --dest-dir=must-gather ns/openshift-sdn Gathering data for ns/openshift-sdn... ... Wrote inspect data to must-gather. error: errors occurred while gathering data: secrets is forbidden: User "system:serviceaccount:openshift-backplane-srep:f2b5cf795ef1fc5289490411d49ab042" cannot list resource "secrets" in API group "" in the namespace "openshift-sdn"
At the end of the day; the 'error' here is 'erroneous' (not a true error) but more of a warning, telling user that a specific object wasn't collected.
Attachments
Issue Links
- links to
-
RHSA-2023:7198
OpenShift Container Platform 4.15 security update
