Bug 1378796

Summary: [platformmanagement_public_479] Always get job-controller serviceaccount can not get jobs in user's project error in master log after set concurrencyPolicy of scheduledjobs as Replace
Product: OpenShift Container Platform Reporter: weiwei jiang <wjiang>
Component: apiserver-authAssignee: Maciej Szulik <maszulik>
Status: CLOSED CURRENTRELEASE QA Contact: Wei Sun <wsun>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aos-bugs, jliggitt, maszulik, wsun
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1385713 (view as bug list) Environment:
Last Closed: 2016-12-09 21:52:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1385713    

Description weiwei jiang 2016-09-23 09:43:50 UTC
Description of problem:
After update the concurrencyPolicy of scheduledjob to Replace, master config got some logs like:

I0923 05:16:02.052041   13943 event.go:217] Event(api.ObjectReference{Kind:"ScheduledJob", Namespace:"wjiang", Name:"sj3", UID:"17c3a0a9-8168-11e6-bd5e-0e2aa5163549", APIVersion:"batch", ResourceVersion:"3611", FieldPath:""}): type: 'Warning' reason: 'FailedGet' Get job: User "system:serviceaccount:openshift-infra:job-controller" cannot get batch.jobs in project "wjiang"


Version-Release number of selected component (if applicable):
devenv-rhel7_5059

How reproducible:
always

Steps to Reproduce:
1. Create a scheduledjob
oc run sj3 --image=busybox --restart=Never --schedule="*/1 * * * *" -- sleep 300
2. Check the master log
3. Set the concurrencyPolicy of the scheduledjob as Replace
oc patch scheduledjobs sj3 -p '{"spec":{"concurrencyPolicy": "Replace"}}'
4. Check the master log again

Actual results:
2. I0923 05:21:05.092455   13943 event.go:217] Event(api.ObjectReference{Kind:"ScheduledJob", Namespace:"wjiang", Name:"sj3", UID:"0231a8f7-816f-11e6-bd5e-0e2aa5163549", APIVersion:"batch", ResourceVersion:"3702", 
FieldPath:""}): type: 'Normal' reason: 'SuccessfulCreate' Created job sj3-466195180
I0923 05:21:05.103606   13943 event.go:217] Event(api.ObjectReference{Kind:"Job", Namespace:"wjiang", Name:"sj3-466195180", UID:"0d998dde-816f-11e6-bd5e-0e2aa5163549", APIVersion:"batch", ResourceVersion:"3705",
 FieldPath:""}): type: 'Normal' reason: 'SuccessfulCreate' Created pod: sj3-466195180-0ey06

4. I0923 05:22:05.359440   13943 event.go:217] Event(api.ObjectReference{Kind:"ScheduledJob", Namespace:"wjiang", Name:"sj3", UID:"0231a8f7-816f-11e6-bd5e-0e2aa5163549", APIVersion:"batch", ResourceVersion:"3730", 
FieldPath:""}): type: 'Warning' reason: 'FailedGet' Get job: User "system:serviceaccount:openshift-infra:job-controller" cannot get batch.jobs in project "wjiang"


Expected results:
4. Should not get log like this.

Additional info:

Comment 1 Jordan Liggitt 2016-09-27 19:07:35 UTC
will be fixed in https://github.com/openshift/origin/pull/11121

Comment 2 weiwei jiang 2016-09-28 09:55:43 UTC
Will give a try after the PR has been merged.

Comment 3 weiwei jiang 2016-09-29 09:54:13 UTC
Checked with devenv-rhel7_5099, and this issue has been fixed.