Bug 1921901

Summary: MutatingWebhookConfiguration pod-identity-webhook does not exclude critical control-plane components
Product: OpenShift Container Platform Reporter: OpenShift BugZilla Robot <openshift-bugzilla-robot>
Component: Cloud Credential OperatorAssignee: Akhil Rane <arane>
Status: CLOSED ERRATA QA Contact: Yunfei Jiang <yunjiang>
Severity: high Docs Contact:
Priority: high    
Version: 4.6CC: aconstan, arane, bbennett, dgoodwin, jialiu, jiazha, kewang, lwan, mifiedle, nstielau, piqin, sjenning, vpickard, yinzhou, yunjiang, zzhao
Target Milestone: ---Keywords: TestBlocker
Target Release: 4.6.zFlags: jialiu: needinfo-
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-02-17 19:25:10 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1903226    
Bug Blocks:    

Comment 1 Akhil Rane 2021-02-01 16:28:49 UTC
*** Bug 1892129 has been marked as a duplicate of this bug. ***

Comment 2 Yunfei Jiang 2021-02-02 08:48:47 UTC
since bug 1892129 is duplicate of this bug, per comment https://bugzilla.redhat.com/show_bug.cgi?id=1892129#c20 
adding TestBlocker keyword.

ps. tried 4-5 times in recent 2 days, all failed.

Comment 5 Nick Stielau 2021-02-03 19:07:28 UTC
Is this something we try to get in by Friday?

Comment 6 Devan Goodwin 2021-02-03 19:10:52 UTC
Github shows: nobunc added the cherry-pick-approved label 1 hour ago

So as of just recently, this hopefully indicates the patch manager has approved and the fix is inbound.

Comment 8 Yunfei Jiang 2021-02-05 06:55:23 UTC
installed 2 times, all succeeded.
verified. PASS.
OCP version: 4.6.0-0.nightly-2021-02-04-203135

Comment 11 errata-xmlrpc 2021-02-17 19:25:10 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6.17 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:0424