Bug 1988351

Summary:	Add new OCM controller pulling periodically SCA certs
Product:	OpenShift Container Platform	Reporter:	Tomas Remes <tremes>
Component:	Insights Operator	Assignee:	Tomas Remes <tremes>
Status:	CLOSED ERRATA	QA Contact:	Dmitry Misharov <dmisharo>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	4.9	CC:	aos-bugs, inecas, mklika, tremes
Target Milestone:	---
Target Release:	4.9.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-18 17:43:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tomas Remes 2021-07-30 11:14:04 UTC

This is the BZ related to impl of the enhancements https://github.com/openshift/enhancements/pull/683

Comment 2 Dmitry Misharov 2021-09-07 06:28:20 UTC

Verified Verified on 4.9.0-0.ci-2021-09-06-064221.
Verification steps:
1. Enable TechPreview https://docs.openshift.com/container-platform/4.8/nodes/clusters/nodes-cluster-enabling-features.html
2. Restart Insights Operator
3. Check the logs:

E0906 11:39:17.353037       1 ocm.go:206] Failed to request the SCA certs: OCM API https://api.openshift.com/api/accounts_mgmt/v1/certificates returned HTTP 403: {"id":"11","kind":"Error","href":"/api/accounts_mgmt/v1/errors/11","code":"ACCT-MGMT-11","reason":"Account with ID 1CzKMWTzDbeN7jOMmO5Ar1Y3Ai1 denied access to perform create on Certificate with HTTP call POST /api/accounts_mgmt/v1/certificates","operation_id":"9d72f7c5-d497-4f23-a006-d775df57fcd3"}
I0906 11:39:17.353065       1 ocm.go:102] Received no SCA certs from the https://api.openshift.com/api/accounts_mgmt/v1/certificates. Please check if it's enabled for your organization.

Comment 5 errata-xmlrpc 2021-10-18 17:43:22 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.9.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:3759