-
Bug
-
Resolution: Done
-
Major
-
None
-
4.12.0
-
None
-
None
-
ODSK 231
-
1
-
Rejected
-
False
-
-
NA
-
Release Note Not Required
Description of problem:
The SQL-based index image created by old opm failed to run in 4.12 even if added the `privileged` permission to the namespace.
Version-Release number of selected component (if applicable):
operator-sdk version: "v1.25.0-ocp", commit: "f11c11eeda6be0554be01a7336c3718b86cc4f60", kubernetes version: "v1.25.0", go version: "go1.19.2", GOOS: "linux", GOARCH: "amd64" cv: 4.12.0-0.nightly-2022-10-25-210451
How reproducible:
always
Steps to Reproduce:
1.$oc create ns kaka -o yaml | oc label -f - security.openshift.io/scc.podSecurityLabelSync=false pod-security.kubernetes.io/enforce=privileged pod-security.kubernetes.io/audit=privileged pod-security.kubernetes.io/warn=privileged --overwrite 2.$operator-sdk run bundle quay.io/olmqe/upgradeoperator-bundle:v0.1 --index-image quay.io/olmqe/upgradeindex-index:v0.1 -n kaka --timeout 5m --security-context-config legacy
Actual results:
1.$FATA[0302] Failed to run bundle: install plan is not available for the subscription upgradeoperator-v0-0-1-sub: Get "https://api.qe-daily-412-1102.qe.azure.devcluster.openshift.com:6443/apis/operators.coreos.com/v1alpha1/namespaces/kaka/subscriptions/upgradeoperator-v0-0-1-sub": context deadline exceeded 2.$oc logs quay-io-olmqe-upgradeoperator-bundle-v0-1 time="2022-11-02T07:12:14Z" level=warning msg="\x1b[1;33mDEPRECATION NOTICE:\nSqlite-based catalogs and their related subcommands are deprecated. Support for\nthem will be removed in a future release. Please migrate your catalog workflows\nto the new file-based catalog format.\x1b[0m" time="2022-11-02T07:12:14Z" level=info msg="adding to the registry" bundles="[quay.io/olmqe/upgradeoperator-bundle:v0.1]" Error: mkdir cache: permission denied Usage: opm registry add [flags]
Expected results:
The old SQL-based index image runs well.
Additional info:
Here is the fixed bug of olm. https://issues.redhat.com/browse/OCPBUGS-122 . Operatorsdk should add the following config to catalogsource automatically when run bundle with old opm index image with flag "--security-context-config legacy": "grpcPodConfig: securityContextConfig: legacy "