Bug 1749036 - Operator Details view becomes flapping when an Operator does not have the proper permissions to run
Summary: Operator Details view becomes flapping when an Operator does not have the pro...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: OLM
Version: 4.2.0
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
: 4.2.0
Assignee: Jeff Peeler
QA Contact: Bruno Andrade
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-09-04 18:15 UTC by Bruno Andrade
Modified: 2019-10-16 06:40 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-10-16 06:40:32 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github operator-framework operator-lifecycle-manager pull 1039 0 None None None 2019-09-11 22:28:30 UTC
Red Hat Product Errata RHBA-2019:2922 0 None None None 2019-10-16 06:40:41 UTC

Description Bruno Andrade 2019-09-04 18:15:54 UTC
Description of problem:
When it's assigned to an OperatorGroup use a Service Account that does not have the proper permissions to install an Operator, it becomes refreshing showing the failure. That happens after a Subscription object is created by using the oc CLI. If everything is done through the OperatorHub, this error does not happen because the UI prevents that the Subscription object to be created.

Evidences:
http://pics.osci.redhat.com/p9704y.png
http://pics.osci.redhat.com/bvp6ti.png
http://pics.osci.redhat.com/x9l1et.png
http://pics.osci.redhat.com/10e8y9.png

That behavior could be reproduced on Firefox and Google Chrome.

Cluster version: 4.2.0-0.nightly-2019-09-03-102130
Console version: 
"io.openshift.build.commit.id": "https://github.com/openshift/console/commit/4abe099486c94c845751abd04a7cf8e7540ece97"


How reproducible:
Always

Steps to Reproduce:

1. Create the namespace test-operators
 oc create ns test-operators
 
2. Create the Operator Group schema
 oc create -f - <<EOF
 apiVersion: operators.coreos.com/v1
 kind: OperatorGroup
 metadata:
   name: test-operators-og
   namespace: test-operators
 spec:
   serviceAccountName: scoped
EOF
 
3. Create a service account
 oc create sa scoped -n  test-operators
 
4. Create the subscription, as below:

oc create -f - <<EOF
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  generation: 1
  name: amq-streams
  namespace: test-operators
spec:
  channel: stable
  installPlanApproval: Automatic
  name: amq-streams
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  startingCSV: amqstreams.v1.2.0
EOF

5. Check the Installed Operators on Web Console of test-operators project after 1 minute.
 
Actual results:
Web Console keeps refreshing, making it impossible to understand the problem that is happening

Expected results:
Web Console should inform the error without refreshing.

Comment 1 Samuel Padgett 2019-09-04 18:48:05 UTC
I was able to reproduce, although I had to wait longer than a minute. It looks like the CSV `status.phase` is flapping between `InstallReady` and `Failed`, which is why the UI keeps updating. Changing to the OLM component.

Comment 2 Evan Cordell 2019-09-09 15:51:24 UTC
I installed a cluster from `ci` and followed the steps here - I didn't see any flapping in the UI. Do you still find this happens?

Comment 3 Samuel Padgett 2019-09-09 15:58:03 UTC
I'm able to reproduce on 4.2.0-0.ci-2019-09-08-032853

Comment 7 Bruno Andrade 2019-09-13 17:02:45 UTC
Console stopped flapping when the service account does not have the proper permissions to install the operator. Marking as VERIFIED.

Cluster Version: 4.2.0-0.nightly-2019-09-13-113908
OLM version: 0.11.0
git commit: 2760276f78584ab485d448fa53abda8025fe5cb0

Steps to Reproduce:

1. Create the namespace test-operators
 oc create ns test-operators
 
2. Create the Operator Group schema
 oc create -f - <<EOF
 apiVersion: operators.coreos.com/v1
 kind: OperatorGroup
 metadata:
   name: test-operators-og
   namespace: test-operators
 spec:
   serviceAccountName: scoped
EOF
 
3. Create a service account
 oc create sa scoped -n  test-operators
 
4. Create the subscription, as below:

oc create -f - <<EOF
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  generation: 1
  name: amq-streams
  namespace: test-operators
spec:
  channel: stable
  installPlanApproval: Automatic
  name: amq-streams
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  startingCSV: amqstreams.v1.2.0
EOF

Comment 8 errata-xmlrpc 2019-10-16 06:40:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2922


Note You need to log in before you can comment on or make changes to this bug.