Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2021:2438
I validated this is fixed in latest ACM ds build: - 2.3.0-DOWNSTREAM-2021-07-06-15-17-20 Validation steps: - Deploy hub cluster - Deploy ACM + Assisted service with latest ACM ds build - Deploy a SNO instance via ACM / Assisted Service - Allow assisted installer controller pod on SNO to complete - Check assisted installer controller pod log and confirm run-level label is removed after install - Check assisted installer namespace and ensure run-level label was removed ## SNO assisted installer controller log [core@snocone-0-0 ~]$ oc logs -f assisted-installer-controller-spqgv | grep run time="2021-07-06T21:27:23Z" level=info msg="Start running Assisted-Controller. Configuration is:\n struct ControllerConfig {\n\tClusterID: \"ecf7a149-bdbc-4833-b836-cd2000271384\",\n\tURL: \"https://assisted-service-rhacm.apps.ocp-edge-cluster-assisted-0.qe.lab.redhat.com\",\n\tPullSecretToken: \"eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJjbHVzdGVyX2lkIjoiZWNmN2ExNDktYmRiYy00ODMzLWI4MzYtY2QyMDAwMjcxMzg0In0.EqgmFkEdnc32ji14EFQrsam1bKL8hu02D7LBqqeuRwmhGX0UgJIwQBK9w1WzQ7Mw7sRnPIWmqZ94zeYGhbYXwg\",\n\tSkipCertVerification: false,\n\tCACertPath: \"/etc/assisted-service/service-ca-cert.crt\",\n\tNamespace: \"assisted-installer\",\n\tOpenshiftVersion: \"4.8.0-fc.3\",\n\tHighAvailabilityMode: \"None\",\n\tWaitForClusterVersion: true,\n\tMustGatherImage: \"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:14bf15424b61f532936deac4270a7956015f793133adb60e2480d31fac8d8c5d\",\n}" time="2021-07-06T21:47:26Z" level=info msg="Removing run-level label from assisted-installer namespace" time="2021-07-06T21:54:26Z" level=info msg="Operator image-registry, statuses: [{Available True 2021-07-06 21:38:58 +0000 UTC Removed NodeCADaemonAvailable: The daemon set node-ca has available replicas\nAvailable: The registry is removed\nImagePrunerAvailable: Pruner CronJob has been created} {Progressing False 2021-07-06 21:38:52 +0000 UTC Removed Progressing: All registry resources are removed} {Degraded False 2021-07-06 21:38:52 +0000 UTC Removed Degraded: The registry is removed}]" [core@snocone-0-0 ~]$ ## SNO assisted-installer project yaml output [core@snocone-0-0 ~]$ oc get project assisted-installer -o yaml apiVersion: project.openshift.io/v1 kind: Project metadata: annotations: openshift.io/sa.scc.mcs: s0:c11,c0 openshift.io/sa.scc.supplemental-groups: 1000110000/10000 openshift.io/sa.scc.uid-range: 1000110000/10000 creationTimestamp: "2021-07-06T21:16:58Z" labels: kubernetes.io/metadata.name: assisted-installer name: assisted-installer resourceVersion: "19878" uid: a8e737da-72b6-42d2-913a-05e0b3a40863 spec: finalizers: - kubernetes status: phase: Active