Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-38689

[gcp] uninstalling failed to delete k8s firewall-rules for a Shared VPC installation using minimum permissions

XMLWordPrintable

    • Important
    • Yes
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      * An installation can succeed when installing a cluster on a {gcp-full} shared virtual private network (VPC) using the minimum permissions and without specifying the`controlPlane.platform.gcp.serviceAccount` in the `install-config.yaml` file. Firewall rules in Kubernetes (K8s) are created in the shared VPC, but destroying the cluster will not delete these firewall rules in K8s because the host project lacks the permissions. (link:https://issues.redhat.com/browse/OCPBUGS-38689[*OCPBUGS-38689*])
      Show
      * An installation can succeed when installing a cluster on a {gcp-full} shared virtual private network (VPC) using the minimum permissions and without specifying the`controlPlane.platform.gcp.serviceAccount` in the `install-config.yaml` file. Firewall rules in Kubernetes (K8s) are created in the shared VPC, but destroying the cluster will not delete these firewall rules in K8s because the host project lacks the permissions. (link: https://issues.redhat.com/browse/OCPBUGS-38689 [* OCPBUGS-38689 *])
    • Known Issue
    • Proposed

      Description of problem:

      Uninstalling failed to delete k8s firewall-rules for a Shared VPC installation using minimum permissions.

      Version-Release number of selected component (if applicable):

      4.18.0-0.nightly-2024-08-19-002129

      How reproducible:

      Always

      Steps to Reproduce:

      1. "create install-config", and then insert the interested settings (see [1])
2. activate the service account having the minimum required permissions for Shared VPC installation (see [2])
3. "create cluster" and make sure it succeed (see [3])
4. "destroy cluster" (see [4])    

      Actual results:

      "destroy cluster" keeps telling warnings on lack of permissions deleting k8s firewall-rules in the host project

      Expected results:

      "destroy cluster" should not complain about lack of permissions deleting k8s firewall-rules in the host project  

      Additional info:

      FYI https://issues.redhat.com/browse/OCPBUGS-38152?focusedId=25382865&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-25382865

              rh-ee-bbarbach Brent Barbachem
              rhn-support-jiwei Jianli Wei
              Jianli Wei Jianli Wei
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: