Bug 2047025

Summary: Installation fails because of Alibaba CSI driver operator is degraded
Product: OpenShift Container Platform Reporter: Jan Safranek <jsafrane>
Component: StorageAssignee: Jan Safranek <jsafrane>
Storage sub component: Operators QA Contact: Wei Duan <wduan>
Status: CLOSED ERRATA Docs Contact:
Severity: urgent    
Priority: unspecified CC: aos-bugs
Version: 4.10   
Target Milestone: ---   
Target Release: 4.10.0   
Hardware: Unspecified   
OS: Unspecified   
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-03-12 04:41:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Jan Safranek 2022-01-27 09:52:40 UTC
Description of problem:
Alibaba CSI driver operator is degraded with this message:

rbac/snapshotter_role.yaml" (string): clusterroles.rbac.authorization.k8s.io "alibaba-disk-external-snapshotter-role" is forbidden: user "system:serviceaccount:openshift-cluster-csi-drivers:alibaba-disk-csi-driver-operator" (groups=["system:serviceaccounts" "system:serviceaccounts:openshift-cluster-csi-drivers" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:{APIGroups:["snapshot.storage.k8s.io"], Resources:["volumesnapshotcontents"], Verbs:["patch"]}"rbac/snapshotter_binding.yaml" (string): clusterroles.rbac.authorization.k8s.io "alibaba-disk-external-snapshotter-role" not found

This PR misses updates of RBAC rules for Alibaba: https://github.com/openshift/cluster-storage-operator/pull/256

Version-Release number of selected component (if applicable):

How reproducible:

Comment 1 Jan Safranek 2022-01-27 09:59:40 UTC
This breaks installation on Alibaba cloud.

Comment 5 Wei Duan 2022-01-28 02:26:58 UTC
Verified pass on 4.10.0-0.nightly-2022-01-27-144113

$ oc get co storage
storage   4.10.0-0.nightly-2022-01-27-144113   True        False         False      58m

Comment 8 errata-xmlrpc 2022-03-12 04:41:56 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.