Bug 1923098

Summary:	[vsphere-problem-detector-operator] Need permission to access replicasets.apps resources
Product:	OpenShift Container Platform	Reporter:	Qin Ping <piqin>
Component:	Storage	Assignee:	Christian Huffman <chuffman>
Storage sub component:	Operators	QA Contact:	Qin Ping <piqin>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	medium
Priority:	unspecified	CC:	aos-bugs, chuffman, hekumar, jsafrane
Version:	4.7
Target Milestone:	---
Target Release:	4.7.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-02-24 15:57:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Qin Ping 2021-02-01 12:16:15 UTC

Description of problem:
Check the vsphere problem detector operator logs, get the following error msg, looks like the serviceaccount system:serviceaccount:openshift-cluster-storage-operator:vsphere-problem-detector-operator needs permission to access replicasets.apps resources.

$ oc -n openshift-cluster-storage-operator logs vsphere-problem-detector-operator-5dcbfd76bb-l9j2c
I0201 06:26:48.301952       1 cmd.go:200] Using service-serving-cert provided certificates
I0201 06:26:48.303025       1 observer_polling.go:159] Starting file observer
W0201 06:26:48.390500       1 builder.go:207] unable to get owner reference (falling back to namespace): replicasets.apps "vsphere-problem-detector-operator-5dcbfd76bb" is forbidden: User "system:serviceaccount:openshift-cluster-storage-operator:vsphere-problem-detector-operator" cannot get resource "replicasets" in API group "apps" in the namespace "openshift-cluster-storage-operator"



Version-Release number of selected component (if applicable):
4.7.0-0.nightly-2021-01-31-031653

How reproducible:
Always

Steps to Reproduce:


Actual results:

Expected results:

Comment 2 Qin Ping 2021-02-03 13:47:35 UTC

Verified with: 4.7.0-0.nightly-2021-02-03-113456

Comment 7 errata-xmlrpc 2021-02-24 15:57:41 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:5633