Bug 1409475
| Summary: | [3.3] Rolebindings fail to update while upgrading EFK | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Jaspreet Kaur <jkaur> |
| Component: | Installer | Assignee: | Scott Dodson <sdodson> |
| Status: | CLOSED ERRATA | QA Contact: | Gaoyun Pei <gpei> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 3.3.0 | CC: | anli, aos-bugs, jokerman, mmccomas, sdodson |
| Target Milestone: | --- | ||
| Target Release: | 3.3.1 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
The logging deployer template had two fields defined incorrectly. Those errors have been resolved and now logging upgrades work properly for OCP 3.3.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-01-24 21:09:54 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
QE could reproduce this bug with openshift-ansible-3.3.57-1.git.0.f275588.el7.noarch.rpm, wait for an errata puddle contains openshift-ansible-3.3.58-1.git.0.fb27109.el7 Verify this bug with openshift-ansible-3.3.58-1.git.0.fb27109.el7.noarch.rpm After installing an ocp-3.3 env, logging pod were running well. [root@ip-172-18-8-70 ~]# oc get pod -n logging NAME READY STATUS RESTARTS AGE logging-curator-1-qxb7h 1/1 Running 0 12m logging-deployer-p1g63 0/1 Completed 0 15m logging-es-jitgq0on-1-n24zf 1/1 Running 0 12m logging-fluentd-00jae 1/1 Running 0 11m logging-fluentd-wcb60 1/1 Running 0 11m logging-kibana-1-96y9f 2/2 Running 1 12m Then run "Generate any missing service accounts and roles" step: [root@ip-172-18-8-70 ~]# oc process logging-deployer-account-template | oc apply -f - serviceaccount "logging-deployer" configured serviceaccount "aggregated-logging-kibana" configured serviceaccount "aggregated-logging-elasticsearch" configured serviceaccount "aggregated-logging-fluentd" configured serviceaccount "aggregated-logging-curator" configured clusterrole "oauth-editor" configured clusterrole "daemonset-admin" configured rolebinding "logging-deployer-edit-role" configured rolebinding "logging-deployer-dsadmin-role" configured Run this command again [root@ip-172-18-8-70 ~]# oc process logging-deployer-account-template | oc apply -f - serviceaccount "logging-deployer" configured serviceaccount "aggregated-logging-kibana" configured serviceaccount "aggregated-logging-elasticsearch" configured serviceaccount "aggregated-logging-fluentd" configured serviceaccount "aggregated-logging-curator" configured clusterrole "oauth-editor" configured clusterrole "daemonset-admin" configured rolebinding "logging-deployer-edit-role" configured rolebinding "logging-deployer-dsadmin-role" configured No error happened, move this to verified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:0189 |
Description of problem: When running below command twice it fails second time as below: $ oc process logging-deployer-account-template | oc apply -f - serviceaccount "logging-deployer" configured serviceaccount "aggregated-logging-kibana" configured serviceaccount "aggregated-logging-elasticsearch" configured serviceaccount "aggregated-logging-fluentd" configured serviceaccount "aggregated-logging-curator" configured clusterrole "oauth-editor" configured clusterrole "daemonset-admin" configured Error from server: RoleBinding "logging-deployer-edit-role" is invalid: roleRef: Invalid value: {"kind":"ClusterRole","name":"edit"}: cannot change roleRef Error from server: RoleBinding "logging-deployer-dsadmin-role" is invalid: roleRef: Invalid value: {"kind":"ClusterRole","name":"daemonset-admin"}: cannot change roleRef Document url : https://docs.openshift.com/container-platform/3.3/install_config/upgrading/manual_upgrades.html#manual-upgrading-efk-logging-stack Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: It fails when ran each time Expected results: It should have overridden role-bindings without any issues. Additional info: