Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-45984

[IBMCloud] [CAPI] ImageReconciliationFailed by invalid IAM token

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • 4.19
    • Installer / IBM Cloud
    • None
    • No
    • Proposed
    • False
    • Hide

      None

      Show
      None
    • Release Note Not Required
    • In Progress

      Description of problem:

      CAPI install got ImageReconciliationFailed when creating vpc custom image

      Version-Release number of selected component (if applicable):

       4.19.0-0.nightly-2024-12-06-101930    

      How reproducible:

      always    

      Steps to Reproduce:

      1.add the following in install-config.yaml
      featureSet: CustomNoUpgrade
      featureGates: [ClusterAPIInstall=true]     
      2. create IBMCloud cluster with IPI    

      Actual results:

      level=info msg=Done creating infra manifests
      level=info msg=Creating kubeconfig entry for capi cluster ci-op-h3ykp5jn-32a54-xprzg
      level=info msg=Waiting up to 30m0s (until 11:25AM UTC) for network infrastructure to become ready...
      level=error msg=failed to fetch Cluster: failed to generate asset "Cluster": failed to create cluster: infrastructure was not ready within 30m0s: client rate limiter Wait returned an error: context deadline exceeded  

      in IBMVPCCluster-openshift-cluster-api-guests log

      reason: ImageReconciliationFailed
          message: 'error failure trying to create vpc custom image: error unknown failure
            creating vpc custom image: The IAM token that was specified in the request has
            expired or is invalid. The request is not authorized to access the Cloud Object
            Storage resource.'  

      Expected results:

      create cluster succeed    

      Additional info:

      the resources created when install failed: 
      ci-op-h3ykp5jn-32a54-xprzg-cos  dff97f5c-bc5e-4455-b470-411c3edbe49c crn:v1:bluemix:public:cloud-object-storage:global:a/fdc2e14cf8bc4d53a67f972dc2e2c861:f648897a-2178-4f02-b948-b3cd53f07d85::
      ci-op-h3ykp5jn-32a54-xprzg-vpc  is.vpc crn:v1:bluemix:public:is:jp-tok:a/fdc2e14cf8bc4d53a67f972dc2e2c861::vpc:r022-46c7932d-8f4d-4d53-a398-555405dfbf18
      copier-resurrect-panzer-resistant  is.security-group crn:v1:bluemix:public:is:jp-tok:a/fdc2e14cf8bc4d53a67f972dc2e2c861::security-group:r022-2367a32b-41d1-4f07-b148-63485ca8437b
      deceiving-unashamed-unwind-outward  is.network-acl crn:v1:bluemix:public:is:jp-tok:a/fdc2e14cf8bc4d53a67f972dc2e2c861::network-acl:r022-b50286f6-1052-479f-89bc-fc66cd9bf613
          

              cschaefe@redhat.com Christopher Schaefer
              maxu@redhat.com May Xu
              May Xu May Xu
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: