Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-23959

cloud-credential-operator is hard to debug

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Normal Normal
    • None
    • 4.15
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Low
    • No
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      CCO started failing due to a credential request error in https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-release-master-ci-4.15-upgrade-from-stable-4.14-e2e-gcp-ovn-rt-upgrade/1728713826913751040

      The only message from the operator is:

      message: 6 of 7 credentials requests provisioned, 1 reporting errors. 

      We had to dig into each credential request to find the broken one, which ended up being due to a quota problem

      failed to grant creds: error syncing creds in mint-mode: error creating custom role: rpc error: code = ResourceExhausted desc = Maximum number of roles reached. Maximum is: 300 

       

      Would it be possible for the operator to bubble up this message? Also could the columns be set for the credentialrequest CRD so it's easier to see which CR's failed when using `oc`? Right now it's just the namespace and name.

       

              Unassigned Unassigned
              stbenjam Stephen Benjamin
              None
              None
              Jianping Shu Jianping Shu
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: