Bug 2041467

Summary: [SSP] Support custom DataImportCron creating in custom namespaces
Product: Container Native Virtualization (CNV) Reporter: Ruth Netser <rnetser>
Component: SSPAssignee: Felix Matouschek <fmatouschek>
Status: CLOSED ERRATA QA Contact: Sarah Bennert <sbennert>
Severity: high Docs Contact:
Priority: high    
Version: 4.10.0CC: cnv-qe-bugs, dholler, ksimon, ycui
Target Milestone: ---   
Target Release: 4.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: v4.11.0-40 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-09-14 19:28:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ruth Netser 2022-01-17 12:19:57 UTC
Description of problem:
Currently, golden images namespace is hardcoded in SSP.
If a user creates a dataImportCron via HCO, they cannot specify a custom namespace.
The dataImportCron will be created in the golden images namespace.


Version-Release number of selected component (if applicable):
CNV 4.10.0

How reproducible:
100%

Steps to Reproduce:
1. Add custom dataImportCron to HCO, set a namespace


Actual results:
SSP rejects the update

Expected results:
DataImportCron should be created in the custom namespace.

Additional info:
metadata:
  name: kubevirt-hyperconverged
spec:
  dataImportCronTemplates:
  - metadata:
      name: custom-data-import-cron
      namespace: golden-images-update-boot-source-test-ssp-data-import-crons
    spec:
      managedDataSource: dummy
      schedule: '* * * * *'
      template:
        spec:
          source:
            registry:
              url: registry.redhat.io/rhel8/rhel-guest-image
          storage:
            resources:
              requests:
                storage: 10Gi

Error:
E           HTTP response body: b'{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"admission webhook \\"validate-hco.kubevirt.io\\" denied the request: admission webhook \\"validation.ssp.kubevirt.io\\" denied the request: dataImportCronTemplates validation error: invalid namespace in DataImportCronTemplate custom-data-import-cron: must be empty or openshift-virtualization-os-images","reason":"dataImportCronTemplates validation error: invalid namespace in DataImportCronTemplate custom-data-import-cron: must be empty or openshift-virtualization-os-images","code":403}\n'

Comment 1 Sarah Bennert 2022-06-29 18:37:06 UTC
Verified
OCP 4.11.0-fc.0
CNV 4.11.0-518

Comment 4 errata-xmlrpc 2022-09-14 19:28:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Virtualization 4.11.0 Images security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:6526