Description of problem: With current OCP 4.6 nightly on AWS (IPI) Running a dry-run on a Pod creation fails Version-Release number of selected component (if applicable): 4.6.0-0.nightly-2020-09-21-030155 on AWS (IPI) How reproducible: Always Steps to Reproduce: 1. Install OCP 4.6 on AWS (IPI) 2. oc create --dry-run=server -f - <<EOF apiVersion: v1 kind: Pod metadata: name: hello spec: containers: - image: docker.io/openshift/hello-openshift name: hello EOF Actual results: Error from server (BadRequest): error when creating "STDIN": admission webhook "pod-identity-webhook.amazonaws.com" does not support dry run Expected results: pod/hello created (server dry run) Additional info: This is a regression, works fine on OCP 4.5.9
xref upstream issue https://github.com/aws/amazon-eks-pod-identity-webhook/issues/46
Seth informed us this regressed because the webhook was not registered in 4.5, but now is in 4.6, and given the upstream shortcoming linked above the problem now surfaces. Trying to confirm if this is a release blocker or not with Scott Dodson now.
fix confirmed $ oc create --dry-run=server -f - <<EOF > apiVersion: v1 > kind: Pod > metadata: > name: hello > spec: > containers: > - image: docker.io/openshift/hello-openshift > name: hello > EOF pod/hello created (server dry run)
The bug has fixed. test payload: 4.6.0-0.nightly-2020-09-24-015627 $ oc create --dry-run=server -f - <<EOF > apiVersion: v1 > kind: Pod > metadata: > name: hello > spec: > containers: > - image: docker.io/openshift/hello-openshift > name: hello > EOF pod/hello created (server dry run)
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6 GA Images), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:4196