Bug 2072848

Summary: (release-4.10) Gather namespace names with overlapping UID ranges
Product: OpenShift Container Platform Reporter: Tomas Remes <tremes>
Component: Insights OperatorAssignee: Tomas Remes <tremes>
Status: CLOSED ERRATA QA Contact: Joao Fula <jfula>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.10CC: aos-bugs, inecas, jfula, mklika, tremes
Target Milestone: ---   
Target Release: 4.10.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2072842
: 2076903 (view as bug list) Environment:
Last Closed: 2022-05-02 18:38:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2072842    
Bug Blocks: 2076903    

Description Tomas Remes 2022-04-07 06:08:41 UTC
+++ This bug was initially created as a clone of Bug #2072842 +++

We want to gather namespace names with some overlapping UID ranges. The UID range is available in the "openshift.io/sa.scc.uid-range" annotation and an example of two overlapping UID ranges could be:

- 1000670000/10000 and 1000675000/10000

Comment 2 Joao Fula 2022-04-22 06:11:16 UTC
Verified on 4.10.0-0.ci-2022-04-21-081919.

Verification steps:
1. Create images.config.openshift.io. If it already exists skip step 1.

2. Download archive.

3. Verify that config/image.json file exists.

Comment 3 Joao Fula 2022-04-22 06:16:13 UTC
Correction:
Verified on 4.10.0-0.ci-2022-04-21-081919.

Steps to reproduce:
1. Create two new namespaces called test-1 and test-2
2. Edit the YAML with the following:

apiVersion: v1
kind: Namespace
metadata:
  annotations:
    openshift.io/description: ""
    openshift.io/display-name: ""
    openshift.io/requester: kube:admin
    openshift.io/sa.scc.uid-range: 1000670000/10000
  labels:
    kubernetes.io/metadata.name: test-1
  name: test-1
spec:

apiVersion: v1
kind: Namespace
metadata:
  annotations:
    openshift.io/description: ""
    openshift.io/display-name: ""
    openshift.io/requester: kube:admin
    openshift.io/sa.scc.uid-range: 1000675000/10000
  labels:
    kubernetes.io/metadata.name: test-2
  name: test-2
spec:

3. Restart insights operator
4. Download archive
5. Check config/namespaces_with_overlapping_uids.json


There should be an array with the names of the overlapping namespaces (test-1, test-2)

Comment 6 errata-xmlrpc 2022-05-02 18:38:50 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.10.12 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:1601