Bug 1743482
| Summary: | local storage operator can not support "All namespaces on the cluster" installation mode | ||||||
|---|---|---|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Qin Ping <piqin> | ||||
| Component: | Storage | Assignee: | Hemant Kumar <hekumar> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Qin Ping <piqin> | ||||
| Severity: | high | Docs Contact: | |||||
| Priority: | high | ||||||
| Version: | 4.2.0 | CC: | aos-bugs, aos-storage-staff, bchilds | ||||
| Target Milestone: | --- | Keywords: | Reopened | ||||
| Target Release: | 4.2.0 | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2019-10-16 06:36:35 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Qin Ping
2019-08-20 05:56:10 UTC
Created attachment 1610664 [details]
The web console to install local storage oprator.
Failed to verify.
1. Installed local storage operator in local-storage project.
2. After creating localvolume instance in local-storage project, no local storage provisioner runs.
$ oc get pod -n local-storage
NAME READY STATUS RESTARTS AGE
local-storage-operator-6b6785b4d-mc89m 1/1 Running 0 7m35s
$ oc get localvolume -n local-storage -oyaml
apiVersion: v1
items:
- apiVersion: local.storage.openshift.io/v1
kind: LocalVolume
metadata:
creationTimestamp: "2019-09-02T05:44:48Z"
finalizers:
- storage.openshift.com/local-volume-protection
generation: 2
name: example
namespace: local-storage
resourceVersion: "65869"
selfLink: /apis/local.storage.openshift.io/v1/namespaces/local-storage/localvolumes/example
uid: c69ba252-cd44-11e9-a3ad-42010a000003
spec:
logLevel: Normal
managementState: Managed
storageClassDevices:
- devicePaths:
- /dev/loop1
- /dev/loop2
fsType: ext4
storageClassName: local-sc
volumeMode: Filesystem
status:
conditions:
- lastTransitionTime: "2019-09-02T05:48:39Z"
message: |-
error syncing local storage: error applying pv cluster role binding local-storage-provisioner-pv-binding: clusterrolebindings.rbac.authorization.k8s.io "local-storage-provisioner-pv-binding" is forbidden: user "system:serviceaccount:local-storage:local-storage-operator" (groups=["system:serviceaccounts" "system:serviceaccounts:local-storage" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["events"], Verbs:["watch" "create" "patch" "update"]}
{APIGroups:[""], Resources:["persistentvolumeclaims"], Verbs:["get" "list" "update" "watch"]}
status: "False"
type: Available
readyReplicas: 0
kind: List
metadata:
resourceVersion: ""
selfLink: ""
$ oc logs local-storage-operator-6b6785b4d-mc89m -n local-storage
I0902 05:40:26.050474 1 main.go:18] Go Version: go1.11.6
I0902 05:40:26.050575 1 main.go:19] Go OS/Arch: linux/amd64
I0902 05:40:26.050588 1 main.go:20] operator-sdk Version: 0.0.7
time="2019-09-02T05:40:26Z" level=info msg="Metrics service local-storage-operator created"
I0902 05:40:26.251922 1 main.go:36] Watching local.storage.openshift.io/v1, LocalVolume
I0902 05:40:26.251931 1 main.go:41] Watching local.storage.openshift.io/v1, LocalVolume, local-storage, 180000000000
I0902 05:44:48.517712 1 api_updater.go:75] Updating localvolume local-storage/example
E0902 05:44:48.637661 1 controller.go:135] error applying pv cluster role binding local-storage-provisioner-pv-binding: clusterrolebindings.rbac.authorization.k8s.io "local-storage-provisioner-pv-binding" is forbidden: user "system:serviceaccount:local-storage:local-storage-operator" (groups=["system:serviceaccounts" "system:serviceaccounts:local-storage" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["events"], Verbs:["watch" "create" "patch" "update"]}
{APIGroups:[""], Resources:["persistentvolumeclaims"], Verbs:["get" "list" "update" "watch"]}
time="2019-09-02T05:44:48Z" level=error msg="error syncing key (local-storage/example): error applying pv cluster role binding local-storage-provisioner-pv-binding: clusterrolebindings.rbac.authorization.k8s.io \"local-storage-provisioner-pv-binding\" is forbidden: user \"system:serviceaccount:local-storage:local-storage-operator\" (groups=[\"system:serviceaccounts\" \"system:serviceaccounts:local-storage\" \"system:authenticated\"]) is attempting to grant RBAC permissions not currently held:\n{APIGroups:[\"\"], Resources:[\"events\"], Verbs:[\"watch\" \"create\" \"patch\" \"update\"]}\n{APIGroups:[\"\"], Resources:[\"persistentvolumeclaims\"], Verbs:[\"get\" \"list\" \"update\" \"watch\"]}"
E0902 05:44:48.752440 1 controller.go:135] error applying pv cluster role binding local-storage-provisioner-pv-binding: clusterrolebindings.rbac.authorization.k8s.io "local-storage-provisioner-pv-binding" is forbidden: user "system:serviceaccount:local-storage:local-storage-operator" (groups=["system:serviceaccounts" "system:serviceaccounts:local-storage" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2922 |