Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 4.12.z
Affects Version/s: 4.12
Component/s: Storage / Operators
Labels:
None

Severity:
Important
Sprint:
Storage Sprint 224
sprint_count:
1
Release Blocker:
Approved
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Release Note Text:
N/A
Release Note Type:
Release Note Not Required
Target Version:

4.12.0

SFDC Cases Counter:
SFDC Cases Links:

Description

Description of problem:

Failing job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-hypershift-main-periodics-conformance-aws-ovn-4-12/1567473426195550208

csi-snapshot-controller-operator logs:

https://gcsweb-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/origin-ci-test/logs/periodic-ci-openshift-hypershift-main-periodics-conformance-aws-ovn-4-12/1567473426195550208/artifacts/conformance-aws-ovn-4-12/dump/artifacts/hostedcluster-da2f3c83dcf87b3116fc/namespaces/openshift-cluster-storage-operator/pods/csi-snapshot-controller-operator-6f798d4f4d-l7pvs/csi-snapshot-controller-operator/csi-snapshot-controller-operator/logs/current.log

The operator misses some RBAC:

2022-09-07T12:13:09.457345845Z F0907 12:13:09.457292       1 cmd.go:138] unable to load configmap based request-header-client-ca-file: configmaps "extension-apiserver-authentication" is forbidden: User "system:serviceaccount:openshift-cluster-storage-operator:csi-snapshot-controller-operator" cannot get resource "configmaps" in API group "" in the namespace "kube-system"

Surprisingly, standalone OCP jobs work well.

Attachments

Issue Links

links to

openshift/cluster-csi-snapshot-controller-operator#127: OCPBUGS-990: Add RBAC to read extension-apiserver-authentication in kube-system

Activity

People

Assignee:: Jan Safranek

Reporter:: Jan Safranek

QA Contact:: Rohit Patil

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Dates

Created:: 2022/09/07 3:36 PM

Updated:: 2024/02/15 3:23 PM

Resolved:: 2023/01/17 7:41 PM