Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1749036

Summary:	Operator Details view becomes flapping when an Operator does not have the proper permissions to run
Product:	OpenShift Container Platform	Reporter:	Bruno Andrade <bandrade>
Component:	OLM	Assignee:	Jeff Peeler <jpeeler>
OLM sub component:	OLM	QA Contact:	Bruno Andrade <bandrade>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	medium
Priority:	unspecified	CC:	aos-bugs, chuo, ecordell, jiazha, jokerman, nhale, scolange, scuppett, yapei
Version:	4.2.0
Target Milestone:	---
Target Release:	4.2.0
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-10-16 06:40:32 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Bruno Andrade 2019-09-04 18:15:54 UTC

Description of problem:
When it's assigned to an OperatorGroup use a Service Account that does not have the proper permissions to install an Operator, it becomes refreshing showing the failure. That happens after a Subscription object is created by using the oc CLI. If everything is done through the OperatorHub, this error does not happen because the UI prevents that the Subscription object to be created.

Evidences:
http://pics.osci.redhat.com/p9704y.png
http://pics.osci.redhat.com/bvp6ti.png
http://pics.osci.redhat.com/x9l1et.png
http://pics.osci.redhat.com/10e8y9.png

That behavior could be reproduced on Firefox and Google Chrome.

Cluster version: 4.2.0-0.nightly-2019-09-03-102130
Console version: 
"io.openshift.build.commit.id": "https://github.com/openshift/console/commit/4abe099486c94c845751abd04a7cf8e7540ece97"


How reproducible:
Always

Steps to Reproduce:

1. Create the namespace test-operators
 oc create ns test-operators
 
2. Create the Operator Group schema
 oc create -f - <<EOF
 apiVersion: operators.coreos.com/v1
 kind: OperatorGroup
 metadata:
   name: test-operators-og
   namespace: test-operators
 spec:
   serviceAccountName: scoped
EOF
 
3. Create a service account
 oc create sa scoped -n  test-operators
 
4. Create the subscription, as below:

oc create -f - <<EOF
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  generation: 1
  name: amq-streams
  namespace: test-operators
spec:
  channel: stable
  installPlanApproval: Automatic
  name: amq-streams
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  startingCSV: amqstreams.v1.2.0
EOF

5. Check the Installed Operators on Web Console of test-operators project after 1 minute.
 
Actual results:
Web Console keeps refreshing, making it impossible to understand the problem that is happening

Expected results:
Web Console should inform the error without refreshing.

Comment 1 Samuel Padgett 2019-09-04 18:48:05 UTC

I was able to reproduce, although I had to wait longer than a minute. It looks like the CSV `status.phase` is flapping between `InstallReady` and `Failed`, which is why the UI keeps updating. Changing to the OLM component.

Comment 2 Evan Cordell 2019-09-09 15:51:24 UTC

I installed a cluster from `ci` and followed the steps here - I didn't see any flapping in the UI. Do you still find this happens?

Comment 3 Samuel Padgett 2019-09-09 15:58:03 UTC

I'm able to reproduce on 4.2.0-0.ci-2019-09-08-032853

Comment 7 Bruno Andrade 2019-09-13 17:02:45 UTC

Console stopped flapping when the service account does not have the proper permissions to install the operator. Marking as VERIFIED.

Cluster Version: 4.2.0-0.nightly-2019-09-13-113908
OLM version: 0.11.0
git commit: 2760276f78584ab485d448fa53abda8025fe5cb0

Steps to Reproduce:

1. Create the namespace test-operators
 oc create ns test-operators
 
2. Create the Operator Group schema
 oc create -f - <<EOF
 apiVersion: operators.coreos.com/v1
 kind: OperatorGroup
 metadata:
   name: test-operators-og
   namespace: test-operators
 spec:
   serviceAccountName: scoped
EOF
 
3. Create a service account
 oc create sa scoped -n  test-operators
 
4. Create the subscription, as below:

oc create -f - <<EOF
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  generation: 1
  name: amq-streams
  namespace: test-operators
spec:
  channel: stable
  installPlanApproval: Automatic
  name: amq-streams
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  startingCSV: amqstreams.v1.2.0
EOF

Comment 8 errata-xmlrpc 2019-10-16 06:40:32 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2922