-
Bug
-
Resolution: Unresolved
-
Major
-
4.20.0
Description:When deleting a HostedCluster on ARO HCP (Azure Red Hat OpenShift Hosted Control Plane), the CLI operation sometimes fails due to a validation error related to the Image Registry operator configuration.Error Message:
lastTransitionTime: "2025-07-10T11:09:01Z"message: 'Error: failed to update image registry management state: configs.imageregistry.operator.openshift.io "cluster" is forbidden: ValidatingAdmissionPolicy 'deny-removed-managementstate' with binding 'deny-removed-managementstate-binding' denied request: Setting managementState to 'Removed' is not allowed in Image Registry config.'observedGeneration: 3reason: ErrorOccurredstatus: "False"type: CloudResourcesDestroyed
Expected Behavior:
- The HostedCluster deletion should complete successfully
- The Image Registry operator configuration should be properly cleaned up during deletion
Actual Behavior:
- The deletion fails due to a ValidatingAdmissionPolicy preventing the Image Registry managementState from being set to 'Removed'
- The CloudResourcesDestroyed condition reports failure
Impact:
- Users cannot cleanly delete their HostedClusters
- May lead to orphaned resources
- Affects cluster lifecycle management
Steps to Reproduce:
- Create a HostedCluster on ARO HCP
- Attempt to delete the HostedCluster using the CLI
- Observe the deletion failure with the above error
Additional Notes:
- The ValidatingAdmissionPolicy 'deny-removed-managementstate' is blocking a legitimate operation during cluster deletion
- This should be handled gracefully during the deletion process
- The validation policy may need to be adjusted to allow this state during cluster deletion
- blocks
-
OCPBUGS-60125 [release-4.19 backport][ARO HCP] HostedCluster deletion fails due to Image Registry managementState validation
-
- Closed
-
- is cloned by
-
OCPBUGS-60125 [release-4.19 backport][ARO HCP] HostedCluster deletion fails due to Image Registry managementState validation
-
- Closed
-
- links to