Bug 1802470

Summary: KS logs show error cannot list resource "configmaps" in API group "" in the namespace "kube-system"
Product: OpenShift Container Platform Reporter: RamaKasturi <knarra>
Component: kube-schedulerAssignee: Maciej Szulik <maszulik>
Status: CLOSED DUPLICATE QA Contact: RamaKasturi <knarra>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.3.zCC: aos-bugs, maszulik, mfojtik
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-13 14:08:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description RamaKasturi 2020-02-13 08:57:19 UTC 
Description of problem:
KS logs show error cannot list resource "configmaps" in API group "" in the namespace "kube-system"

Version-Release number of selected component (if applicable):
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.3.0-0.nightly-2020-02-11-224725   True        False         51m     Cluster version is 4.3.0-0.nightly-2020-02-11-224725


How reproducible:
Always

Steps to Reproduce:
1. Install OCP cluster with payload 4.3.0-0.nightly-2020-02-11-224725
2. Run the command below oc logs -f openshift-kube-scheduler-knarra43-b8czh-control-plane-0 -n  openshift-kube-scheduler


Actual results:
E0213 07:36:01.917594       1 reflector.go:123] k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209: Failed to list *v1.ConfigMap: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot list resource "configmaps" in API group "" in the namespace "kube-system"
E0213 07:36:02.919108       1 reflector.go:123] k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209: Failed to list *v1.ConfigMap: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot list resource "configmaps" in API group "" in the namespace "kube-system"
E0213 07:36:02.919799       1 reflector.go:123] k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209: Failed to list *v1.ConfigMap: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot list resource "configmaps" in API group "" in the namespace "kube-system"

Expected results:
Logs should not be spammed with errors.

Additional info:
Comment 1 Maciej Szulik 2020-02-13 14:08:33 UTC 

*** This bug has been marked as a duplicate of bug 1790481 ***