Bug 2106347
| Summary: | Submariner error looking up service account submariner-operator/submariner-addon-sa | ||
|---|---|---|---|
| Product: | Red Hat Advanced Cluster Management for Kubernetes | Reporter: | Noam Manos <nmanos> |
| Component: | Submariner | Assignee: | Stephen Kitt <skitt> |
| Status: | CLOSED ERRATA | QA Contact: | Maxim Babushkin <mbabushk> |
| Severity: | high | Docs Contact: | Christopher Dawson <cdawson> |
| Priority: | high | ||
| Version: | rhacm-2.6 | CC: | cbynum, maafried, nyechiel, skitt |
| Target Milestone: | --- | Flags: | bot-tracker-sync:
rhacm-2.6+
cbynum: rhacm-2.6.z+ |
| Target Release: | rhacm-2.6 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-09-06 22:33:43 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Noam Manos
2022-07-12 12:09:21 UTC
Noam saw this on OCP 4.9 with Kubernetes 1.22: https://qe-jenkins-csb-skynet.apps.ocp-c1.prod.psi.redhat.com/job/ACM-2.5.2-Submariner-0.12.2-AWS-OSP-Globalnet/3/Test-Report/ The SA is supposed to be created on the hub, it’s defined in https://github.com/stolostron/submariner-addon/blob/main/pkg/hub/submarineraddonagent/manifests/serviceaccount.yaml. The SA is supposed to be created via ManifestWorks, see https://github.com/stolostron/submariner-addon/blob/main/pkg/hub/submarineraddonagent/agent.go#L90 From the logs: 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 1 submariner-controller Normal RoleBindingCreated Created RoleBinding.rbac.authorization.k8s.io/open-cluster-management:submariner-addon:agent -n acm-aws-nmanos-cluster-a2 because it was missing 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 2 replicaset-controller Warning FailedCreate Error creating: pods "submariner-addon-6cbff668fc-" is forbidden: error looking up service account submariner-operator/submariner-addon-sa: serviceaccount "submariner-addon-sa" not found 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 1 addon-addon-deploy-controller Warning ManifestWorkUpdateFailed Failed to update ManifestWork acm-aws-nmanos-cluster-a2/addon-submariner-deploy: Operation cannot be fulfilled on manifestworks.work.open-cluster-management.io "addon-submariner-deploy": the object has been modified; please apply your changes to the latest version and try again 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 1 addon-csr-approving-controller Normal AddonCSRAutoApproved addon csr "addon-acm-aws-nmanos-cluster-a2-submariner-6ksfv" is auto approved by addon csr controller <nil> <nil> <none> <none> Normal Scheduled Successfully assigned submariner-operator/submariner-addon-6cbff668fc-n44tm to ip-10-166-239-215.us-west-1.compute.internal 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 1 submariner-controller Normal RoleCreated Created Role.rbac.authorization.k8s.io/open-cluster-management:submariner-addon:agent -n acm-aws-nmanos-cluster-a2 because it was missing 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 1 work-agent-manifestworkagent Normal NamespaceUpdated Updated Namespace/submariner-operator because it changed 2022-07-24T13:23:16Z 2022-07-24T13:23:16Z 1 work-agent-manifestworkagent Normal ServiceAccountCreated Created ServiceAccount/submariner-addon-sa -n submariner-operator because it was missing The submariner-addon-sa account is created after the replicaset which wants to use it. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:6370 |