Bug 1843391
| Summary: | ASB/TSB operators failed to upgrade from 4.2.z to 4.3.z | |||
|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Cuiping HUO <chuo> | |
| Component: | Service Broker | Assignee: | Shawn Hurley <shurley> | |
| Status: | CLOSED WONTFIX | QA Contact: | Cuiping HUO <chuo> | |
| Severity: | urgent | Docs Contact: | ||
| Priority: | urgent | |||
| Version: | 4.2.z | CC: | aos-bugs, chezhang, chuo, jesusr, jiazha, marobrie | |
| Target Milestone: | --- | Keywords: | TestBlocker, UpcomingSprint | |
| Target Release: | 4.3.z | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | ||
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1844048 (view as bug list) | Environment: | ||
| Last Closed: | 2020-06-16 15:31:01 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1844048 | |||
| Bug Blocks: | ||||
Description of problem: ASB/TSB operators failed to upgrade from 4.2 to 4.3 Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: 1. using app registry openshift-qe-optional-operators as operator source 2. install asb and tsb operator with manifest from openshift-qe-optional-operators, choose channel "4.2", the csv version are openshiftansibleservicebroker.4.2.33-202005300632 and openshifttemplateservicebrokeroperator.4.2.33-202005300632 3. change asb and tsb operator subscription channel to "4.3" through web console Actual results: both asb and tsb operator can't upgrade to 4.3 successfully Expected results: asb and tsb operator can upgrade to 4.3 successfully Additional info: $ oc get csv -n openshift-ansible-service-broker NAME DISPLAY VERSION REPLACES PHASE openshiftansibleservicebroker.4.2.33-202005300632 OpenShift Ansible Service Broker Operator 4.2.33-202005300632 Replacing openshiftansibleservicebroker.4.3.24-202006011358 OpenShift Ansible Service Broker Operator 4.3.24-202006011358 openshiftansibleservicebroker.4.2.33-202005300632 Failed $ oc get csv openshiftansibleservicebroker.4.3.24-202006011358 -n openshift-ansible-service-broker -o yaml apiVersion: operators.coreos.com/v1alpha1 kind: ClusterServiceVersion metadata: annotations: alm-examples: '[{"apiVersion":"osb.openshift.io/v1", "kind":"AutomationBroker", "metadata":{"name":"ansible-service-broker","namespace":"ansible-service-broker"}, "spec":{"createBrokerNamespace":"false","waitForBroker":"false", "registries": [{"type": "rhcc", "name": "rhcc", "url": "https://registry.redhat.io", "white_list": [".*-apb$"], "auth_type": "secret", "auth_name": "asb-registry-auth"}]}}]' capabilities: Seamless Upgrades containerImage: quay.io/openshift-qe-optional-operators/ose-ansible-service-broker@sha256:9d104a2b6efc384ad8da5c3f3abcf0ad6adf48c11459294aef966809c64182d7 description: OpenShift Ansible Service Broker is an implementation of the [Open Service Broker API](https://github.com/openservicebrokerapi/servicebroker) olm.operatorGroup: openshift-ansible-service-broker-hk7q5 olm.operatorNamespace: openshift-ansible-service-broker olm.skipRange: '>=4.2.0 <4.3.24-202006011358' olm.targetNamespaces: openshift-ansible-service-broker creationTimestamp: "2020-06-03T06:58:18Z" ... status: conditions: - lastTransitionTime: "2020-06-03T08:13:29Z" lastUpdateTime: "2020-06-03T08:13:29Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:31Z" lastUpdateTime: "2020-06-03T08:13:31Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:32Z" lastUpdateTime: "2020-06-03T08:13:32Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:33Z" lastUpdateTime: "2020-06-03T08:13:33Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:35Z" lastUpdateTime: "2020-06-03T08:13:35Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:36Z" lastUpdateTime: "2020-06-03T08:13:36Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:37Z" lastUpdateTime: "2020-06-03T08:13:37Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:39Z" lastUpdateTime: "2020-06-03T08:13:39Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:40Z" lastUpdateTime: "2020-06-03T08:13:40Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:41Z" lastUpdateTime: "2020-06-03T08:13:41Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:43Z" lastUpdateTime: "2020-06-03T08:13:43Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:44Z" lastUpdateTime: "2020-06-03T08:13:44Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:45Z" lastUpdateTime: "2020-06-03T08:13:45Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:47Z" lastUpdateTime: "2020-06-03T08:13:47Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:48Z" lastUpdateTime: "2020-06-03T08:13:48Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:49Z" lastUpdateTime: "2020-06-03T08:13:49Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:51Z" lastUpdateTime: "2020-06-03T08:13:51Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:52Z" lastUpdateTime: "2020-06-03T08:13:52Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:53Z" lastUpdateTime: "2020-06-03T08:13:53Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:55Z" lastUpdateTime: "2020-06-03T08:13:55Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed lastTransitionTime: "2020-06-03T08:13:55Z" lastUpdateTime: "2020-06-03T08:13:55Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed requirementStatus: - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: automationbrokers.osb.openshift.io status: Present uuid: 02a88d98-5a7c-4ea7-9b6c-60fb596217fc version: v1beta1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: bundlebindings.automationbroker.io status: Present uuid: c3dbb026-ca95-4e40-a195-dcef29104c03 version: v1beta1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: bundleinstances.automationbroker.io status: Present uuid: 09c7c22e-2621-460b-9285-0ae2c67f8564 version: v1beta1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: bundles.automationbroker.io status: Present uuid: 0f237de2-538a-4934-9cc7-34a5a02336bb version: v1beta1 - dependents: - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["get"],"apiGroups":[""],"resources":["namespaces"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":[""],"resources":["pods","configmaps","secrets","services","services/finalizers","endpoints"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["apps"],"resources":["deployments","deployments/finalizers","replicasets"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["route.openshift.io"],"resources":["routes"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["apps.openshift.io"],"resources":["deploymentconfigs"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["monitoring.coreos.com"],"resources":["servicemonitors"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["monitoring.coreos.com"],"resources":["prometheusrules","servicemonitors"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":[""],"resources":["serviceaccounts","namespaces","pods"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authentication.k8s.io"],"resources":["tokenreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authorization.k8s.io"],"resources":["subjectaccessreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","patch","get","list"],"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterroles","clusterrolebindings","rolebindings"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["servicecatalog.k8s.io"],"resources":["clusterservicebrokers","servicebrokers"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","list","get"],"apiGroups":["networking.k8s.io"],"resources":["networkpolicies"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authorization.openshift.io"],"resources":["subjectrulesreview"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","update","list"],"apiGroups":["network.openshift.io",""],"resources":["clusternetworks","netnamespaces"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","list"],"apiGroups":["image.openshift.io",""],"resources":["images"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["osb.openshift.io"],"resources":["*"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["automationbroker.io"],"resources":["*"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","post","put","patch","delete"],"nonResourceURLs":["/osb","/osb/*"]} status: Satisfied version: v1beta1 group: "" kind: ServiceAccount message: "" name: openshift-ansible-service-broker-operator status: Present version: v1 $ oc get csv -n openshift-template-service-broker NAME DISPLAY VERSION REPLACES PHASE openshifttemplateservicebrokeroperator.4.2.33-202005300632 OpenShift Template Service Broker Operator 4.2.33-202005300632 Replacing openshifttemplateservicebrokeroperator.4.3.24-202006011358 OpenShift Template Service Broker Operator 4.3.24-202006011358 openshifttemplateservicebrokeroperator.4.2.33-202005300632 Failed $ oc get csv openshiftansibleservicebroker.4.3.24-202006011358 -n openshift-ansible-service-broker -o yaml -n openshift-template-service-broker apiVersion: operators.coreos.com/v1alpha1 kind: ClusterServiceVersion metadata: annotations: alm-examples: '[{"apiVersion":"osb.openshift.io/v1", "kind":"AutomationBroker", "metadata":{"name":"ansible-service-broker","namespace":"ansible-service-broker"}, "spec":{"createBrokerNamespace":"false","waitForBroker":"false", "registries": [{"type": "rhcc", "name": "rhcc", "url": "https://registry.redhat.io", "white_list": [".*-apb$"], "auth_type": "secret", "auth_name": "asb-registry-auth"}]}}]' capabilities: Seamless Upgrades containerImage: quay.io/openshift-qe-optional-operators/ose-ansible-service-broker@sha256:9d104a2b6efc384ad8da5c3f3abcf0ad6adf48c11459294aef966809c64182d7 description: OpenShift Ansible Service Broker is an implementation of the [Open Service Broker API](https://github.com/openservicebrokerapi/servicebroker) olm.operatorGroup: openshift-ansible-service-broker-hk7q5 olm.operatorNamespace: openshift-ansible-service-broker olm.skipRange: '>=4.2.0 <4.3.24-202006011358' olm.targetNamespaces: openshift-ansible-service-broker creationTimestamp: "2020-06-03T06:58:18Z" ... status: conditions: - lastTransitionTime: "2020-06-03T08:13:29Z" lastUpdateTime: "2020-06-03T08:13:29Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:31Z" lastUpdateTime: "2020-06-03T08:13:31Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:32Z" lastUpdateTime: "2020-06-03T08:13:32Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:33Z" lastUpdateTime: "2020-06-03T08:13:33Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:35Z" lastUpdateTime: "2020-06-03T08:13:35Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:36Z" lastUpdateTime: "2020-06-03T08:13:36Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:37Z" lastUpdateTime: "2020-06-03T08:13:37Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:39Z" lastUpdateTime: "2020-06-03T08:13:39Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:40Z" lastUpdateTime: "2020-06-03T08:13:40Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:41Z" lastUpdateTime: "2020-06-03T08:13:41Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:43Z" lastUpdateTime: "2020-06-03T08:13:43Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:44Z" lastUpdateTime: "2020-06-03T08:13:44Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:45Z" lastUpdateTime: "2020-06-03T08:13:45Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:47Z" lastUpdateTime: "2020-06-03T08:13:47Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:48Z" lastUpdateTime: "2020-06-03T08:13:48Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:49Z" lastUpdateTime: "2020-06-03T08:13:49Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:51Z" lastUpdateTime: "2020-06-03T08:13:51Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:13:52Z" lastUpdateTime: "2020-06-03T08:13:52Z" message: 'installing: missing deployment with name=openshift-ansible-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:13:53Z" lastUpdateTime: "2020-06-03T08:13:53Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:13:55Z" lastUpdateTime: "2020-06-03T08:13:55Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed lastTransitionTime: "2020-06-03T08:13:55Z" lastUpdateTime: "2020-06-03T08:13:55Z" message: 'install strategy failed: Deployment.apps "openshift-ansible-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-ansible-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed requirementStatus: - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: automationbrokers.osb.openshift.io status: Present uuid: 02a88d98-5a7c-4ea7-9b6c-60fb596217fc version: v1beta1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: bundlebindings.automationbroker.io status: Present uuid: c3dbb026-ca95-4e40-a195-dcef29104c03 version: v1beta1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: bundleinstances.automationbroker.io status: Present uuid: 09c7c22e-2621-460b-9285-0ae2c67f8564 version: v1beta1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: bundles.automationbroker.io status: Present uuid: 0f237de2-538a-4934-9cc7-34a5a02336bb version: v1beta1 - dependents: - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["get"],"apiGroups":[""],"resources":["namespaces"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":[""],"resources":["pods","configmaps","secrets","services","services/finalizers","endpoints"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["apps"],"resources":["deployments","deployments/finalizers","replicasets"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["route.openshift.io"],"resources":["routes"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["apps.openshift.io"],"resources":["deploymentconfigs"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["monitoring.coreos.com"],"resources":["servicemonitors"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["monitoring.coreos.com"],"resources":["prometheusrules","servicemonitors"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":[""],"resources":["serviceaccounts","namespaces","pods"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authentication.k8s.io"],"resources":["tokenreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authorization.k8s.io"],"resources":["subjectaccessreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","patch","get","list"],"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterroles","clusterrolebindings","rolebindings"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["servicecatalog.k8s.io"],"resources":["clusterservicebrokers","servicebrokers"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","list","get"],"apiGroups":["networking.k8s.io"],"resources":["networkpolicies"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authorization.openshift.io"],"resources":["subjectrulesreview"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","update","list"],"apiGroups":["network.openshift.io",""],"resources":["clusternetworks","netnamespaces"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","list"],"apiGroups":["image.openshift.io",""],"resources":["images"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["osb.openshift.io"],"resources":["*"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["automationbroker.io"],"resources":["*"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","post","put","patch","delete"],"nonResourceURLs":["/osb","/osb/*"]} status: Satisfied version: v1beta1 group: "" kind: ServiceAccount message: "" name: openshift-ansible-service-broker-operator status: Present version: v1 [chuo@localhost .kube]$ oc get csv openshifttemplateservicebrokeroperator.4.3.24-202006011358 -o yaml apiVersion: operators.coreos.com/v1alpha1 kind: ClusterServiceVersion metadata: annotations: alm-examples: '[{"apiVersion":"osb.openshift.io/v1","kind":"TemplateServiceBroker","metadata":{"name":"template-service-broker","namespace":"template-service-broker"},"spec":{}}]' capabilities: Seamless Upgrades containerImage: quay.io/openshift-qe-optional-operators/ose-template-service-broker@sha256:c7f07ed872c2b3081487a89205dcfc2953883657497a3937168d4dda2a0d16a9 description: OpenShift Template Service Broker is an implementation of the [Open Service Broker API](https://github.com/openservicebrokerapi/servicebroker) olm.operatorGroup: openshift-template-service-broker-j9s4m olm.operatorNamespace: openshift-template-service-broker olm.skipRange: '>=4.2.0 <4.3.24-202006011358' olm.targetNamespaces: openshift-template-service-broker creationTimestamp: "2020-06-03T08:00:09Z" generation: 1 labels: olm.api.57b56b9c59508420: provided name: openshifttemplateservicebrokeroperator.4.3.24-202006011358 namespace: openshift-template-service-broker resourceVersion: "644125" selfLink: /apis/operators.coreos.com/v1alpha1/namespaces/openshift-template-service-broker/clusterserviceversions/openshifttemplateservicebrokeroperator.4.3.24-202006011358 uid: fa03519e-5af2-4126-8c27-7b7abdbd278f spec: apiservicedefinitions: {} customresourcedefinitions: owned: - description: An Open Service Broker supporting management of OpenShift templates. displayName: Template Service Broker kind: TemplateServiceBroker name: templateservicebrokers.osb.openshift.io version: v1 description: | The OpenShift Template Service Broker implements the [Open Service Broker API](https://github.com/openservicebrokerapi/servicebroker/blob/master/spec.md) endpoints: - *Catalog*: returns a list of available templates as OSB API *Service* objects (the templates are read from one or more namespaces configured in the master config). - *Provision*: provision a given template (referred by its UID) into a namespace. Under the covers, this creates a non-namespaced **BrokerTemplateInstance** object for the template service broker to store state associated with the the instantiation, as well as the **Secret** and **TemplateInstance** objects which are picked up by the **TemplateInstance** controller. *Provision* is an asynchronous operation: it may return before provisioning is completed, and the provision status can (must) be recovered via the *Last Operation* endpoint (see below). - *Bind*: for a given template, return "credentials" exposed in any created ConfigMap, Secret, Service or Route object (see ExposeAnnotationPrefix and Base64ExposeAnnotationPrefix documentation). The *Bind* call records the fact that it took place in the appropriate **BrokerTemplateInstance** object. - *Unbind*: this simply removes the metadata previously placed in the **BrokerTemplateInstance** object by a *Bind* call. - *Deprovision*: removes the objects created by the *Provision* call. The garbage collector removes all additional objects created by the **TemplateInstance** controller, hopefully transitively, as documented above. - *Last Operation*: returns the status of the previously run asynchronous operation. In the template service broker, *Provision* is the only asynchronous operation. displayName: OpenShift Template Service Broker Operator install: spec: clusterPermissions: - rules: - apiGroups: - osb.openshift.io resources: - templateservicebrokers - templateservicebrokers/status verbs: - '*' - apiGroups: - servicecatalog.k8s.io resources: - clusterservicebrokers - servicebrokers verbs: - '*' - apiGroups: - rbac.authorization.k8s.io resources: - roles - rolebindings - clusterroles - clusterrolebindings verbs: - create - delete - patch - get - list - watch - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - create - apiGroups: - authorization.openshift.io resources: - subjectaccessreviews verbs: - create - apiGroups: - template.openshift.io resources: - brokertemplateinstances verbs: - create - delete - get - update - apiGroups: - template.openshift.io resources: - brokertemplateinstances/finalizers verbs: - update - apiGroups: - template.openshift.io resources: - templateinstances verbs: - assign - create - delete - get - apiGroups: - template.openshift.io resources: - templates verbs: - get - list - watch - apiGroups: - "" resources: - services verbs: - get - list - watch - apiGroups: - "" resources: - secrets verbs: - create - delete - get - apiGroups: - "" resources: - configmaps verbs: - get - apiGroups: - "" resources: - routes verbs: - get - apiGroups: - route.openshift.io resources: - routes verbs: - get - apiGroups: - "" resources: - events verbs: - create - patch - update - nonResourceURLs: - /brokers/template.openshift.io/* verbs: - delete - get - put - update serviceAccountName: openshift-template-service-broker-operator deployments: - name: openshift-template-service-broker-operator spec: replicas: 1 selector: matchLabels: name: openshift-template-service-broker-operator strategy: {} template: metadata: creationTimestamp: null labels: name: openshift-template-service-broker-operator name: openshift-template-service-broker-operator spec: containers: - env: - name: IMAGE value: quay.io/openshift-qe-optional-operators/ose-template-service-broker@sha256:c7f07ed872c2b3081487a89205dcfc2953883657497a3937168d4dda2a0d16a9 - name: OPERATOR_NAME value: openshift-template-service-broker-operator - name: POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: WATCH_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace image: quay.io/openshift-qe-optional-operators/ose-template-service-broker-operator@sha256:9f4d368997fce4519c8ffee2545cdf1a05b45377f015719bdfe71cabeff8bde6 imagePullPolicy: IfNotPresent name: openshift-template-service-broker-operator resources: {} serviceAccountName: openshift-template-service-broker-operator permissions: - rules: - apiGroups: - "" resources: - pods - configmaps - secrets - services - services/finalizers - serviceaccounts - endpoints verbs: - '*' - apiGroups: - apps resources: - deployments - deployments/finalizers - replicasets verbs: - '*' - apiGroups: - apps.openshift.io resources: - deploymentconfigs verbs: - '*' - apiGroups: - monitoring.coreos.com resources: - prometheusrules - servicemonitors verbs: - '*' serviceAccountName: openshift-template-service-broker-operator strategy: deployment installModes: - supported: true type: OwnNamespace - supported: true type: SingleNamespace - supported: false type: MultiNamespace - supported: false type: AllNamespaces keywords: - template - broker - open service broker labels: alm-status-descriptors: openshifttemplateservicebrokeroperator.v0.1.0 operated-by: openshifttemplateservicebroker links: - name: Documentation url: https://docs.okd.io/latest/architecture/service_catalog/template_service_broker.html - name: Source Code url: https://github.com/openshift/origin/tree/master/pkg/templateservicebroker maintainers: - email: ansible-service-broker name: Red Hat, Inc. maturity: stable provider: name: Red Hat, Inc. replaces: openshifttemplateservicebrokeroperator.4.2.33-202005300632 selector: matchLabels: operated-by: openshifttemplateservicebroker version: 4.3.24-202006011358 status: conditions: - lastTransitionTime: "2020-06-03T08:15:23Z" lastUpdateTime: "2020-06-03T08:15:23Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:24Z" lastUpdateTime: "2020-06-03T08:15:24Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:15:26Z" lastUpdateTime: "2020-06-03T08:15:26Z" message: 'install strategy failed: Deployment.apps "openshift-template-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-template-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:15:27Z" lastUpdateTime: "2020-06-03T08:15:27Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:28Z" lastUpdateTime: "2020-06-03T08:15:28Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:15:30Z" lastUpdateTime: "2020-06-03T08:15:30Z" message: 'install strategy failed: Deployment.apps "openshift-template-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-template-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:15:31Z" lastUpdateTime: "2020-06-03T08:15:31Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:32Z" lastUpdateTime: "2020-06-03T08:15:32Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:15:34Z" lastUpdateTime: "2020-06-03T08:15:34Z" message: 'install strategy failed: Deployment.apps "openshift-template-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-template-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:15:36Z" lastUpdateTime: "2020-06-03T08:15:36Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:36Z" lastUpdateTime: "2020-06-03T08:15:36Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:15:38Z" lastUpdateTime: "2020-06-03T08:15:38Z" message: 'install strategy failed: Deployment.apps "openshift-template-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-template-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:15:40Z" lastUpdateTime: "2020-06-03T08:15:40Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:41Z" lastUpdateTime: "2020-06-03T08:15:41Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:15:42Z" lastUpdateTime: "2020-06-03T08:15:42Z" message: 'install strategy failed: Deployment.apps "openshift-template-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-template-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:15:44Z" lastUpdateTime: "2020-06-03T08:15:44Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:45Z" lastUpdateTime: "2020-06-03T08:15:45Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: "2020-06-03T08:15:47Z" lastUpdateTime: "2020-06-03T08:15:47Z" message: 'install strategy failed: Deployment.apps "openshift-template-service-broker-operator" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"name":"openshift-template-service-broker-operator"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable' phase: Failed reason: InstallComponentFailed - lastTransitionTime: "2020-06-03T08:15:48Z" lastUpdateTime: "2020-06-03T08:15:48Z" message: 'installing: missing deployment with name=openshift-template-service-broker-operator' phase: Pending reason: NeedsReinstall - lastTransitionTime: "2020-06-03T08:15:49Z" lastUpdateTime: "2020-06-03T08:15:49Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet lastTransitionTime: "2020-06-03T08:15:49Z" lastUpdateTime: "2020-06-03T08:15:49Z" message: all requirements found, attempting install phase: InstallReady reason: AllRequirementsMet requirementStatus: - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: templateservicebrokers.osb.openshift.io status: Present uuid: 5a60a6e1-7c82-4e47-a6a6-e1949ec12d5a version: v1beta1 - dependents: - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":[""],"resources":["pods","configmaps","secrets","services","services/finalizers","serviceaccounts","endpoints"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["apps"],"resources":["deployments","deployments/finalizers","replicasets"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["apps.openshift.io"],"resources":["deploymentconfigs"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: namespaced rule:{"verbs":["*"],"apiGroups":["monitoring.coreos.com"],"resources":["prometheusrules","servicemonitors"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["osb.openshift.io"],"resources":["templateservicebrokers","templateservicebrokers/status"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["*"],"apiGroups":["servicecatalog.k8s.io"],"resources":["clusterservicebrokers","servicebrokers"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","patch","get","list","watch"],"apiGroups":["rbac.authorization.k8s.io"],"resources":["roles","rolebindings","clusterroles","clusterrolebindings"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authorization.k8s.io"],"resources":["subjectaccessreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authentication.k8s.io"],"resources":["tokenreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create"],"apiGroups":["authorization.openshift.io"],"resources":["subjectaccessreviews"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","get","update"],"apiGroups":["template.openshift.io"],"resources":["brokertemplateinstances"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["update"],"apiGroups":["template.openshift.io"],"resources":["brokertemplateinstances/finalizers"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["assign","create","delete","get"],"apiGroups":["template.openshift.io"],"resources":["templateinstances"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","list","watch"],"apiGroups":["template.openshift.io"],"resources":["templates"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get","list","watch"],"apiGroups":[""],"resources":["services"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","delete","get"],"apiGroups":[""],"resources":["secrets"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get"],"apiGroups":[""],"resources":["configmaps"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get"],"apiGroups":[""],"resources":["routes"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["get"],"apiGroups":["route.openshift.io"],"resources":["routes"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["create","patch","update"],"apiGroups":[""],"resources":["events"]} status: Satisfied version: v1beta1 - group: rbac.authorization.k8s.io kind: PolicyRule message: cluster rule:{"verbs":["delete","get","put","update"],"nonResourceURLs":["/brokers/template.openshift.io/*"]} status: Satisfied version: v1beta1 group: "" kind: ServiceAccount message: "" name: openshift-template-service-broker-operator status: Present version: v1