Name: tackle Namespace: openshift-mta Labels: Annotations: API Version: tackle.konveyor.io/v1alpha2 Kind: Tackle Metadata: Creation Timestamp: 2024-07-02T14:23:56Z Generation: 1 Managed Fields: API Version: tackle.konveyor.io/v1alpha1 Fields Type: FieldsV1 fieldsV1: f:metadata: f:annotations: .: f:kubectl.kubernetes.io/last-applied-configuration: f:spec: .: f:cache_data_volume_size: f:feature_auth_required: f:hub_bucket_volume_size: f:keycloak_sso_req_passwd_update: f:rwx_supported: Manager: kubectl-client-side-apply Operation: Update Time: 2024-07-02T14:23:56Z API Version: tackle.konveyor.io/v1alpha1 Fields Type: FieldsV1 fieldsV1: f:status: .: f:conditions: Manager: ansible-operator Operation: Update Subresource: status Time: 2024-07-02T15:08:56Z Resource Version: 753280 UID: 99a9bac2-da66-4d3b-b92a-c1068266e8b7 Spec: cache_data_volume_size: 20Gi feature_auth_required: true hub_bucket_volume_size: 20Gi keycloak_sso_req_passwd_update: true rwx_supported: false Status: Conditions: Last Transition Time: 2024-07-02T14:29:48Z Message: Reason: Status: False Type: Successful Ansible Result: Changed: 0 Completion: 2024-07-02T15:06:11.829806 Failures: 1 Ok: 10 Skipped: 15 Last Transition Time: 2024-07-02T15:06:12Z Message: Exception '403 Reason: Forbidden HTTP response headers: HTTPHeaderDict({'Audit-Id': 'e5bfb48e-95cf-4e86-a302-69f5ed1f5dca', 'Cache-Control': 'no-cache, private', 'Content-Length': '376', 'Content-Type': 'application/json', 'Date': 'Tue, 02 Jul 2024 15:06:11 GMT', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload', 'X-Content-Type-Options': 'nosniff', 'X-Kubernetes-Pf-Flowschema-Uid': 'cac95bf4-ee3a-48c8-8b1f-c56cc4802d09', 'X-Kubernetes-Pf-Prioritylevel-Uid': '6bf895d6-4ec5-4f1d-8711-cdce3a8416a3'}) HTTP response body: b'{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"secrets \\"tackle-keycloak-postgresql\\" is forbidden: User \\"system:serviceaccount:openshift-mta:mta-operator\\" cannot get resource \\"secrets\\" in API group \\"\\" in the namespace \\"konveyor-tackle\\"","reason":"Forbidden","details":{"name":"tackle-keycloak-postgresql","kind":"secrets"},"code":403}\n' Original traceback: File "/usr/lib/python3.6/site-packages/kubernetes/dynamic/client.py", line 55, in inner resp = func(self, *args, **kwargs) File "/usr/lib/python3.6/site-packages/kubernetes/dynamic/client.py", line 283, in request _request_timeout=params.get('_request_timeout') File "/usr/lib/python3.6/site-packages/kubernetes/client/api_client.py", line 353, in call_api _preload_content, _request_timeout, _host) File "/usr/lib/python3.6/site-packages/kubernetes/client/api_client.py", line 184, in __call_api _request_timeout=_request_timeout) File "/usr/lib/python3.6/site-packages/kubernetes/client/api_client.py", line 377, in request headers=headers) File "/usr/lib/python3.6/site-packages/kubernetes/client/rest.py", line 245, in GET query_params=query_params) File "/usr/lib/python3.6/site-packages/kubernetes/client/rest.py", line 235, in request raise ApiException(http_resp=r) ' raised while trying to get resource using (name=tackle-keycloak-postgresql, namespace=konveyor-tackle, label_selectors=[], field_selectors=[]) Reason: Failed Status: False Type: Failure Last Transition Time: 2024-07-02T15:08:56Z Message: Running reconciliation Reason: Running Status: True Type: Running Events: