Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-37952

All GCP CredentialsRequest set to CredentialsProvisionFailure=True on GCP WIF cluster

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.14.z, 4.15.z, 4.17, 4.16.z
    • Moderate
    • None
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      On GCP WIF cluster, All GCP CredentialsRequest set to CredentialsProvisionFailure=True after cluster install     

      Version-Release number of selected component (if applicable):

      4.17
      4.16.z
      4.15.z
      4.14.z     

      How reproducible:

      Always    

      Steps to Reproduce:

          1.Install a GCP WIF cluster and wait for cluster installed
          2.Check the GCP CredentialsRequest status
          

      Actual results:

      jianpingshu@jshu-mac ~ % oc -n openshift-cloud-credential-operator get -o json credentialsrequests | jq -r '.items[] | select(tostring | contains("InfrastructureMismatch") | not) | .metadata.name as $n | .status.conditions // [{type: "NoConditions"}] | .[] | .type + "=" + .status + " " + $n + " " + .reason + ": " + .message' | sort
      CredentialsProvisionFailure=True cloud-credential-operator-gcp-ro-creds CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed
      CredentialsProvisionFailure=True openshift-cloud-network-config-controller-gcp CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed
      CredentialsProvisionFailure=True openshift-gcp-ccm CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed
      CredentialsProvisionFailure=True openshift-gcp-pd-csi-driver-operator CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed
      CredentialsProvisionFailure=True openshift-image-registry-gcs CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed
      CredentialsProvisionFailure=True openshift-ingress-gcp CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed
      CredentialsProvisionFailure=True openshift-machine-api-gcp CredentialsProvisionFailure: failed to grant creds: error determining whether a credentials update is needed    

      Expected results:

      All GCP CredentialsRequest shall NOT have CredentialsProvisionFailure condition     

      Additional info:

      No issue on AWS STS cluster.
      jianpingshu@jshu-mac ~ % oc -n openshift-cloud-credential-operator get -o json credentialsrequests | jq -r '.items[] | select(tostring | contains("InfrastructureMismatch") | not) | .metadata.name as $n | .status.conditions // [{type: "NoCon
      ditions"}] | .[] | .type + "=" + .status + " " + $n + " " + .reason + ": " + .message' | sort
      NoConditions= aws-ebs-csi-driver-operator :
      NoConditions= cloud-credential-operator-iam-ro :
      NoConditions= openshift-cloud-network-config-controller-aws :
      NoConditions= openshift-image-registry :
      NoConditions= openshift-ingress :
      NoConditions= openshift-machine-api-aws :
      
      No issue on Azure Entra Id cluster.
      jianpingshu@jshu-mac ~ % oc -n openshift-cloud-credential-operator get -o json credentialsrequests | jq -r '.items[] | select(tostring | contains("InfrastructureMismatch") | not) | .metadata.name as $n | .status.conditions // [{type: "NoCon
      ditions"}] | .[] | .type + "=" + .status + " " + $n + " " + .reason + ": " + .message' | sort
      NoConditions= azure-disk-csi-driver-operator :
      NoConditions= azure-file-csi-driver-operator :
      NoConditions= openshift-azure-cloud-controller-manager :
      NoConditions= openshift-cloud-network-config-controller-azure :
      NoConditions= openshift-image-registry-azure :
      NoConditions= openshift-ingress-azure :
      NoConditions= openshift-machine-api-azure :    

            rh-ee-mold Mark Old
            jshu@redhat.com Jianping Shu
            Jianping Shu Jianping Shu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: