Bug 2100323
| Summary: | Sqlit-based catsrc cannot be ready due to "Error: open ./db-xxxx: permission denied" | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | xzha |
| Component: | OLM | Assignee: | Per da Silva <pegoncal> |
| OLM sub component: | OLM | QA Contact: | xzha |
| Status: | CLOSED ERRATA | Docs Contact: | |
| Severity: | urgent | ||
| Priority: | urgent | CC: | fpaoline, tomckay |
| Version: | 4.11 | ||
| Target Milestone: | --- | ||
| Target Release: | 4.11.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-08-10 11:19:11 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2101802 | ||
verify zhaoxia@xzha-mac test % oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.11.0-0.nightly-2022-06-24-041539 True False 20m Cluster version is 4.11.0-0.nightly-2022-06-24-041539 zhaoxia@xzha-mac test % oc adm release info registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2022-06-24-041539 --commits|grep operator-lifecycle-manager operator-lifecycle-manager https://github.com/openshift/operator-framework-olm a4147fcb829e6b782b3c78ac69290de7142d5c5d 1, install catsrc zhaoxia@xzha-mac test % cat catsrc-test.yaml apiVersion: operators.coreos.com/v1alpha1 kind: CatalogSource metadata: name: test-index-xzha-1 namespace: openshift-marketplace spec: displayName: Test publisher: OLM-QE sourceType: grpc image: quay.io/olmqe/ditto-index:test-xzha-1 updateStrategy: registryPoll: interval: 10m oc apply -f catsrc-test.yaml 2, check catsrc status zhaoxia@xzha-mac test % oc get catsrc test-index-xzha-1 -o yaml apiVersion: operators.coreos.com/v1alpha1 kind: CatalogSource metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{},"name":"test-index-xzha-1","namespace":"openshift-marketplace"},"spec":{"displayName":"Test","image":"quay.io/olmqe/ditto-index:test-xzha-1","publisher":"OLM-QE","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"10m"}}}} creationTimestamp: "2022-06-24T06:42:06Z" generation: 1 name: test-index-xzha-1 namespace: openshift-marketplace resourceVersion: "33414" uid: 54cb00d4-47ce-4b0d-8f7e-8070e658734c spec: displayName: Test image: quay.io/olmqe/ditto-index:test-xzha-1 publisher: OLM-QE sourceType: grpc updateStrategy: registryPoll: interval: 10m status: connectionState: address: test-index-xzha-1.openshift-marketplace.svc:50051 lastConnect: "2022-06-24T06:42:32Z" lastObservedState: READY registryService: createdAt: "2022-06-24T06:42:06Z" port: "50051" protocol: grpc serviceName: test-index-xzha-1 serviceNamespace: openshift-marketplace zhaoxia@xzha-mac test % oc get pod NAME READY STATUS RESTARTS AGE 464e7118966c2ea099f418cbfa6db4996b5a9bfc222cf00ce64bba153frfqlx 0/1 Completed 0 10m 64d5fab169da9e89f0d139e3a61687bd81fdff3d268b1e0152e3e750a5g5952 0/1 Completed 0 10m certified-operators-dd7bq 1/1 Running 0 32m community-operators-2mxx6 1/1 Running 0 32m marketplace-operator-fb574d489-bg2x7 1/1 Running 0 38m qe-app-registry-7rb8g 1/1 Running 0 10m redhat-marketplace-24ppb 1/1 Running 0 32m redhat-operators-h2fsd 1/1 Running 0 32m test-index-xzha-1-5n5g6 1/1 Running 0 112s zhaoxia@xzha-mac test % oc get packagemanifests| grep Test ditto-operator Test 2m16s zhaoxia@xzha-mac test % 3, install sub using this catsrc zhaoxia@xzha-mac test % oc new-project test-1 zhaoxia@xzha-mac test % cat og.yaml kind: OperatorGroup apiVersion: operators.coreos.com/v1 metadata: name: og-single namespace: test-1 spec: targetNamespaces: - test-1 zhaoxia@xzha-mac test % oc apply -f og.yaml zhaoxia@xzha-mac test % cat sub_ditto.yaml apiVersion: operators.coreos.com/v1alpha1 kind: Subscription metadata: name: ditto-operator namespace: test-1 spec: channel: "alpha" installPlanApproval: Automatic name: ditto-operator source: test-index-xzha-1 sourceNamespace: openshift-marketplace zhaoxia@xzha-mac test % oc apply -f sub_ditto.yaml 4, check csv zhaoxia@xzha-mac test % oc get sub ditto-operator -o=jsonpath='{.status.state}' AtLatestKnown zhaoxia@xzha-mac test % oc get csv NAME DISPLAY VERSION REPLACES PHASE ditto-operator.v0.2.0 Eclipse Ditto 0.2.0 ditto-operator.v0.1.1 Succeeded elasticsearch-operator.v5.5.0 OpenShift Elasticsearch Operator 5.5.0 Succeeded LGTM. verified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:5069 |
Description of problem: Sqlit-based catsrc cannot be ready due to "Error: open ./db-xxxx: permission denied" Version-Release number of selected component (if applicable): zhaoxia@xzha-mac test % oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.11.0-0.nightly-2022-06-22-190830 True False 47m Cluster version is 4.11.0-0.nightly-2022-06-22-190830 zhaoxia@xzha-mac test % oc exec catalog-operator-79bf7db89f-td58w -- olm --version OLM version: 0.19.0 git commit: 8ee785c8646e0f8395ada5e10ebb04ac161331a0 How reproducible: always Steps to Reproduce: 1. create index image # opm index add --bundles quay.io/olmqe/ditto-operator:0.1.0,quay.io/olmqe/ditto-operator:0.1.1,quay.io/olmqe/ditto-operator:0.2.0 --tag quay.io/olmqe/ditto-index:test-xzha-1 -c docker # docker push quay.io/olmqe/ditto-index:test-xzha-1 2. create catsrc zhaoxia@xzha-mac test % cat catsrc-test.yaml apiVersion: operators.coreos.com/v1alpha1 kind: CatalogSource metadata: name: test-index-xzha-1 namespace: openshift-marketplace spec: displayName: Test publisher: OLM-QE sourceType: grpc image: quay.io/olmqe/ditto-index:test-xzha-1 updateStrategy: registryPoll: interval: 10m oc apply -f catsrc-test.yaml 3. check pod zhaoxia@xzha-mac test % oc get pod -n openshift-marketplace NAME READY STATUS RESTARTS AGE certified-operators-2f2b6 1/1 Running 0 55m community-operators-9cg5n 1/1 Running 0 55m marketplace-operator-567b597b45-wfvmj 1/1 Running 0 58m redhat-marketplace-fz8fg 1/1 Running 0 55m redhat-operators-b8g69 1/1 Running 0 55m test-index-xzha-1-rmz8t 0/1 CrashLoopBackOff 5 (89s ago) 4m38s test-index-xzha-s8wks 0/1 CrashLoopBackOff 6 (119s ago) 7m39s zhaoxia@xzha-mac test % oc get pod test-index-xzha-1-rmz8t -o yaml containerStatuses: - containerID: cri-o://d7047090732c234301128c7fd9b7fa36869bc01408966b3b93a88baf1023053a image: quay.io/olmqe/ditto-index:test-xzha-1 imageID: quay.io/olmqe/ditto-index@sha256:f09ce64f154e9bcb1e8064aedeef982768a02256765c636932df044aba3499da lastState: terminated: containerID: cri-o://d7047090732c234301128c7fd9b7fa36869bc01408966b3b93a88baf1023053a exitCode: 1 finishedAt: "2022-06-23T04:23:40Z" message: |+ time="2022-06-23T04:23:40Z" level=warning msg="\x1b[1;33mDEPRECATION NOTICE:\nSqlite-based catalogs and their related subcommands are deprecated. Support for\nthem will be removed in a future release. Please migrate your catalog workflows\nto the new file-based catalog format.\x1b[0m" Error: open ./db-1620022896: permission denied Usage: opm registry serve [flags] Flags: -d, --database string relative path to sqlite db (default "bundles.db") --debug enable debug logging -h, --help help for serve -p, --port string port number to serve on (default "50051") --skip-migrate do not attempt to migrate to the latest db revision when starting -t, --termination-log string path to a container termination log file (default "/dev/termination-log") --timeout-seconds string Timeout in seconds. This flag will be removed later. (default "infinite") Global Flags: --skip-tls-verify skip TLS certificate verification for container image registries while pulling bundles --use-http use plain HTTP for container image registries while pulling bundles reason: Error startedAt: "2022-06-23T04:23:40Z" Actual results: The pod is not running Expected results: pod of catsrc is running Additional info: File-based catalog doesn't has such issue