Bug 1880944
| Summary: | Pod creation dry-run fails, 'admission webhook "pod-identity-webhook.amazonaws.com" does not support dry run' | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Marek Schmidt <maschmid> |
| Component: | Cloud Credential Operator | Assignee: | Seth Jennings <sjenning> |
| Status: | CLOSED ERRATA | QA Contact: | wang lin <lwan> |
| Severity: | high | Docs Contact: | |
| Priority: | medium | ||
| Version: | 4.6 | CC: | afield, jdiaz, lwan, sjenning |
| Target Milestone: | --- | Keywords: | TestBlockerForLayeredProduct |
| Target Release: | 4.6.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-10-27 16:42:58 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
xref upstream issue https://github.com/aws/amazon-eks-pod-identity-webhook/issues/46 Seth informed us this regressed because the webhook was not registered in 4.5, but now is in 4.6, and given the upstream shortcoming linked above the problem now surfaces. Trying to confirm if this is a release blocker or not with Scott Dodson now. fix confirmed
$ oc create --dry-run=server -f - <<EOF
> apiVersion: v1
> kind: Pod
> metadata:
> name: hello
> spec:
> containers:
> - image: docker.io/openshift/hello-openshift
> name: hello
> EOF
pod/hello created (server dry run)
The bug has fixed.
test payload: 4.6.0-0.nightly-2020-09-24-015627
$ oc create --dry-run=server -f - <<EOF
> apiVersion: v1
> kind: Pod
> metadata:
> name: hello
> spec:
> containers:
> - image: docker.io/openshift/hello-openshift
> name: hello
> EOF
pod/hello created (server dry run)
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6 GA Images), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:4196 |
Description of problem: With current OCP 4.6 nightly on AWS (IPI) Running a dry-run on a Pod creation fails Version-Release number of selected component (if applicable): 4.6.0-0.nightly-2020-09-21-030155 on AWS (IPI) How reproducible: Always Steps to Reproduce: 1. Install OCP 4.6 on AWS (IPI) 2. oc create --dry-run=server -f - <<EOF apiVersion: v1 kind: Pod metadata: name: hello spec: containers: - image: docker.io/openshift/hello-openshift name: hello EOF Actual results: Error from server (BadRequest): error when creating "STDIN": admission webhook "pod-identity-webhook.amazonaws.com" does not support dry run Expected results: pod/hello created (server dry run) Additional info: This is a regression, works fine on OCP 4.5.9