Bug 2038160

Summary:	The `default` project missed the annotation : openshift.io/node-selector: ""
Product:	OpenShift Container Platform	Reporter:	zhou ying <yinzhou>
Component:	kube-controller-manager	Assignee:	Filip Krepinsky <fkrepins>
Status:	CLOSED ERRATA	QA Contact:	zhou ying <yinzhou>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.10	CC:	aos-bugs, mfojtik
Target Milestone:	---
Target Release:	4.10.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-03-10 16:37:38 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description zhou ying 2022-01-07 13:35:21 UTC

Description of problem:
The `default` project missed the annotation : openshift.io/node-selector: ""
So when scheduler with defaultNodeSelector, all the `oc debug node/nodename` command will failed unless specify the namespace with the annotation.


Version-Release number of selected component (if applicable):


How reproducible:
always

Steps to Reproduce:
1.Update the scheduler cluster to specify defaultNodeSelector: defaultNodeSelector: type=foo,region=foo

2.Run the `oc debug node/nodename` command


Actual results:
2. The `oc debug node/nodename` always failed on all nodes without the defaultNodeSelector labels, must specify namespace with the annotation : openshift.io/node-selector: ""


Expected results:
2. If the `default` project with annotation : openshift.io/node-selector: ""
The `oc debug node/nodename` will always succeed.


Additional info:

Comment 1 zhou ying 2022-01-07 13:38:58 UTC

[root@localhost ~]# oc version 
Client Version: 4.10.0-202201041327.p0.g080f0de.assembly.stream-080f0de
Server Version: 4.10.0-0.nightly-2022-01-06-183041
Kubernetes Version: v1.22.1+6859754

Comment 2 Maciej Szulik 2022-01-10 15:08:26 UTC

The whole story behind it is in https://bugzilla.redhat.com/show_bug.cgi?id=1812813

but the tl;dr is that:
1. we won't be changing annotations on default project
2. we will detect failure in creating debug pod and inform a user about such situation.

Nothing more.

Comment 8 errata-xmlrpc 2022-03-10 16:37:38 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0056