Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-11701

RHOSO serviceaccounts "openstackclient-openstackclient" is forbidden

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • openstack-operator
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • ?
    • ?
    • ?
    • None
    • Moderate

      Describe your problem. Include specific actions and error messages.
      Hello support,

      We've made a fresh deployment of latest rhoso release.
      Openstackclient pods is not able to be created, I observe the following errors :

      ==================================
      Warning FailedMount 6s kubelet MountVolume.SetUp failed for volume "kube-api-access-c94pc" : failed to fetch token: serviceaccounts "openstac ¦
      ¦ kclient-openstackclient" is forbidden: User "system:node:localhost" cannot create resource "serviceaccounts/token" in API group "" in the nam ¦
      ¦ espace "openstack": no relationship found between node 'localhost' and this object ¦
      ¦ Warning ErrorUpdatingResource 6s controlplane addLogicalPort failed for openstack/openstackclient: failed to update pod openstack/openstackclient: pod "open ¦
      ¦ stackclient" not found

      ==================================
      Namespace has correct labels as indicated in documentation :

      oc get namespace openstack -ojsonpath='

      {.metadata.labels}

      ' | jq

      { "kubernetes.io/metadata.name": "openstack", "pod-security.kubernetes.io/audit": "restricted", "pod-security.kubernetes.io/audit-version": "v1.24", "pod-security.kubernetes.io/enforce": "privileged", "pod-security.kubernetes.io/warn": "restricted", "pod-security.kubernetes.io/warn-version": "v1.24", "security.openshift.io/scc.podSecurityLabelSync": "false" }

      Kevin

      Describe the impact to you or the business
      na

      In what environment are you experiencing this behavior?
      UAT

      How frequently does this behavior occur? Does it occur repeatedly or at certain times?
      always

              Unassigned Unassigned
              rhn-support-dhill Dave Hill
              rhos-dfg-ospk8s
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: