Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1509192 - `oc debug` pod does not work and shows "cannot set blockOwnerDeletion if an ownerReference ..."
`oc debug` pod does not work and shows "cannot set blockOwnerDeletion if an o...
Status: CLOSED ERRATA
Product: OpenShift Container Platform
Classification: Red Hat
Component: Command Line Interface (Show other bugs)
3.7.0
Unspecified Unspecified
medium Severity medium
: ---
: 3.7.0
Assigned To: Juan Vallejo
Xingxing Xia
: Regression
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2017-11-03 06:18 EDT by Xingxing Xia
Modified: 2017-11-28 17:21 EST (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-11-28 17:21:23 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:3188 normal SHIPPED_LIVE Moderate: Red Hat OpenShift Container Platform 3.7 security, bug, and enhancement update 2017-11-28 21:34:54 EST

  None (edit)
Description Xingxing Xia 2017-11-03 06:18:51 EDT
Description of problem:
`oc debug` pod does not work and shows "cannot set blockOwnerDeletion if an ownerReference ..."

Version-Release number of selected component (if applicable):
  First found in free-stg v3.7.0-0.178.2 (online version 3.6.0.35)
  Double reproduced in OCP v3.7.0-0.190.0

How reproducible:
Always

Steps to Reproduce:
1. Create any pod, e.g. create app via template "MySQL (Persistent)"
2. oc get pod
NAME             READY     STATUS    RESTARTS   AGE
dctest-1-4v89g   2/2       Running   0          11m
mysql-1-85ldc    1/1       Running   0          9m

3. $ oc debug mysql-1-85ldc # pod dctest-1-4v89g is same
Debugging with pod/mysql-1-85ldc-debug, original command: container-entrypoint run-mysqld
Error from server (Forbidden): pods "mysql-1-85ldc-debug" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: User "xingxingxia" cannot update replicationcontrollers/finalizers in project "xxia-proj", <nil>

4. oc debug dc/mysql
Debugging with pod/mysql-debug, original command: container-entrypoint run-mysqld
Waiting for pod to start ...

Actual results:
3. `oc debug` pod cannot work, but `oc debug` dc can

Expected results:
3. oc debug pod should work

Additional info:
Comment 1 Juan Vallejo 2017-11-03 15:11:37 EDT
Origin PR: https://github.com/openshift/origin/pull/17178
Comment 3 Xingxing Xia 2017-11-07 04:35:42 EST
Verified in oc/OCP v3.7.0-0.196.0, thx
Like for DC, `oc debug` pod works now:
$ oc debug mysql-2-7vtp5
Debugging with pod/mysql-2-7vtp5-debug ...
...
sh-4.2$
Comment 6 errata-xmlrpc 2017-11-28 17:21:23 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3188

Note You need to log in before you can comment on or make changes to this bug.