Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-44760

OLM doesn't support for user defined ServiceAccount for OperatorGroup.

XMLWordPrintable

    • Critical
    • No
    • Bulbasaur OLM Sprint 262
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, if OLM was unable to access the secret associated with a service account, OLM would rely on the Kubernetes API server to automatically create a bearer token. With Kubernetes versions 1.22 and later, this action is no longer automatic, so with this release OLM uses the `TokenRequest` API to request a new Kubernetes API token.
      Show
      * Previously, if OLM was unable to access the secret associated with a service account, OLM would rely on the Kubernetes API server to automatically create a bearer token. With Kubernetes versions 1.22 and later, this action is no longer automatic, so with this release OLM uses the `TokenRequest` API to request a new Kubernetes API token.
    • Bug Fix
    • Done

      This is a clone of issue OCPBUGS-42360. The following is the description of the original issue:
      —
      Description of problem:

          due to https://issues.redhat.com/browse/API-1644, no token was generate for sa automatically, it is needed to add one step to create the token manually.

      Version-Release number of selected component (if applicable):

      After creating a new service account, one step should be added to create a long-lived API token

      How reproducible:

          always

      Steps to Reproduce:

      secret yaml file exmaple:

xzha@xzha1-mac OCP-24771 % cat secret.yaml 
apiVersion: v1
kind: Secret
metadata:
  name: scoped
  annotations:
    kubernetes.io/service-account.name: scoped
type: kubernetes.io/service-account-token

      Actual results:

      Expected results:

      Additional info:

              rh-ee-jkeister Jordan Keister
              openshift-crt-jira-prow OpenShift Prow Bot
              Xia Zhao Xia Zhao
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: