Bug 1802470 - KS logs show error cannot list resource "configmaps" in API group "" in the namespace "kube-system"
Summary: KS logs show error cannot list resource "configmaps" in API group "" in the n...
Keywords:
Status: CLOSED DUPLICATE of bug 1790481
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: kube-scheduler
Version: 4.3.z
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: ---
Assignee: Maciej Szulik
QA Contact: RamaKasturi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-02-13 08:57 UTC by RamaKasturi
Modified: 2020-02-14 15:47 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-02-13 14:08:33 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description RamaKasturi 2020-02-13 08:57:19 UTC
Description of problem:
KS logs show error cannot list resource "configmaps" in API group "" in the namespace "kube-system"

Version-Release number of selected component (if applicable):
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.3.0-0.nightly-2020-02-11-224725   True        False         51m     Cluster version is 4.3.0-0.nightly-2020-02-11-224725


How reproducible:
Always

Steps to Reproduce:
1. Install OCP cluster with payload 4.3.0-0.nightly-2020-02-11-224725
2. Run the command below oc logs -f openshift-kube-scheduler-knarra43-b8czh-control-plane-0 -n  openshift-kube-scheduler


Actual results:
E0213 07:36:01.917594       1 reflector.go:123] k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209: Failed to list *v1.ConfigMap: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot list resource "configmaps" in API group "" in the namespace "kube-system"
E0213 07:36:02.919108       1 reflector.go:123] k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209: Failed to list *v1.ConfigMap: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot list resource "configmaps" in API group "" in the namespace "kube-system"
E0213 07:36:02.919799       1 reflector.go:123] k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209: Failed to list *v1.ConfigMap: configmaps "extension-apiserver-authentication" is forbidden: User "system:kube-scheduler" cannot list resource "configmaps" in API group "" in the namespace "kube-system"

Expected results:
Logs should not be spammed with errors.

Additional info:

Comment 1 Maciej Szulik 2020-02-13 14:08:33 UTC

*** This bug has been marked as a duplicate of bug 1790481 ***


Note You need to log in before you can comment on or make changes to this bug.