Bug 2066768

Summary: [CNV-4.11-HCO] User Cannot List Resource "namespaces" in API group
Product: Container Native Virtualization (CNV) Reporter: Mor Cohen <mocohen>
Component: InstallationAssignee: Simone Tiraboschi <stirabos>
Status: CLOSED ERRATA QA Contact: Debarati Basu-Nag <dbasunag>
Severity: high Docs Contact:
Priority: unspecified    
Version: 4.11.0CC: cnv-qe-bugs, stirabos
Target Milestone: ---Keywords: AutomationBlocker, TestBlocker
Target Release: 4.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-09-14 19:29:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
hco-operator's pod logs none

Description Mor Cohen 2022-03-22 12:51:30 UTC
Created attachment 1867481 [details]
hco-operator's pod logs

Description of problem:
HCO won't reconcile because of the following error message from hco-operator pod logs:
W0322 12:22:49.081244       1 reflector.go:324] sigs.k8s.io/controller-runtime/pkg/cache/internal/informers_map.go:250: failed to list *v1.Namespace: namespaces is forbidden: User "system:serviceaccount:openshift-cnv:hyperconverged-cluster-operator" cannot list resource "namespaces" in API group "" at the cluster scope

Version-Release number of selected component (if applicable):
CNV v4.11.0.rhel9-135

How reproducible:
100

Steps to Reproduce:
1. Install CNV v4.11.0.rhel9-135

Additional info:
Attached more logs.

Comment 1 Mor Cohen 2022-03-23 11:44:13 UTC
I see that we didn't get this problem on the following build: v4.11.0.rhel9-141. Will close this if we won't get this issue on another newer build.

Comment 2 Mor Cohen 2022-03-23 11:48:35 UTC
Getting this issue also on v4.11.0.rhel9-143

Comment 3 Mor Cohen 2022-03-24 07:23:20 UTC
This issue came up during installation on the following builds:
CNV v4.11.0.rhel9-145
**CNV v4.11.0.rhel9-149** (latest one)

But not on (which was installed successfully and passed all smoke tests):
CNV v4.11.0.rhel9-144
CNV v4.11.0.rhel9-146
CNV v4.11.0.rhel9-147

Comment 4 Mor Cohen 2022-03-24 07:29:57 UTC
Just adding that we get this issue while installation of CNV.

Comment 12 errata-xmlrpc 2022-09-14 19:29:09 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Virtualization 4.11.0 Images security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:6526