Bug 2041989

Summary: CredentialsRequest manifests being installed for ibm-cloud-managed profile
Product: OpenShift Container Platform Reporter: Joel Diaz <jdiaz>
Component: NetworkingAssignee: Ben Bennett <bbennett>
Networking sub component: openshift-sdn QA Contact: zhaozhanqi <zzhao>
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: high CC: bpickard
Version: 4.10   
Target Milestone: ---   
Target Release: 4.10.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-03-10 16:40:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Joel Diaz 2022-01-18 16:34:43 UTC
Description of problem:
The CredentialsRequests in the cluster-network-operator are annotated so that they get installed in the 'ibm-cloud-managed' profile. That profile doesn't run the cloud-credential-operator, so there is no need to install the manifests.

Version-Release number of selected component (if applicable):


How reproducible: 100%


Steps to Reproduce:
1. look at https://github.com/openshift/cluster-network-operator/blob/master/manifests/0000_70_cluster-network-operator_01_credentialsrequest.yaml
2. look at https://github.com/openshift/cluster-network-operator/blob/master/manifests/02-cncc-credentials.yaml
3.

Actual results:
The CredentialsRequest resources are annotated with:
    include.release.openshift.io/ibm-cloud-managed: "true"

Expected results:
No 'ibm-cloud-managed' annotation.

Additional info:

Comment 4 zhaozhanqi 2022-01-25 03:05:26 UTC
Verified this bug on 4.10.0-0.nightly-2022-01-24-020644

$ oc get CredentialsRequest openshift-cloud-network-config-controller-aws -o yaml -n openshift-cloud-credential-operator | grep ibm
$ oc get CredentialsRequest openshift-cloud-network-config-controller-azure -o yaml -n openshift-cloud-credential-operator | grep ibm
$ oc get CredentialsRequest openshift-cloud-network-config-controller-gcp -o yaml -n openshift-cloud-credential-operator | grep ibm
$ oc get CredentialsRequest openshift-network -o yaml -n openshift-cloud-credential-operator | grep ibm

Comment 8 errata-xmlrpc 2022-03-10 16:40:33 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0056