Bug 1923098 - [vsphere-problem-detector-operator] Need permission to access replicasets.apps resources
Summary: [vsphere-problem-detector-operator] Need permission to access replicasets.app...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Storage
Version: 4.7
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 4.7.0
Assignee: Christian Huffman
QA Contact: Qin Ping
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-02-01 12:16 UTC by Qin Ping
Modified: 2023-01-27 02:44 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-02-24 15:57:41 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift cluster-storage-operator pull 134 0 None open Bug 1923098: Add replicasets to vsphere permissions 2021-02-02 19:07:19 UTC
Red Hat Product Errata RHSA-2020:5633 0 None None None 2021-02-24 15:57:55 UTC

Description Qin Ping 2021-02-01 12:16:15 UTC
Description of problem:
Check the vsphere problem detector operator logs, get the following error msg, looks like the serviceaccount system:serviceaccount:openshift-cluster-storage-operator:vsphere-problem-detector-operator needs permission to access replicasets.apps resources.

$ oc -n openshift-cluster-storage-operator logs vsphere-problem-detector-operator-5dcbfd76bb-l9j2c
I0201 06:26:48.301952       1 cmd.go:200] Using service-serving-cert provided certificates
I0201 06:26:48.303025       1 observer_polling.go:159] Starting file observer
W0201 06:26:48.390500       1 builder.go:207] unable to get owner reference (falling back to namespace): replicasets.apps "vsphere-problem-detector-operator-5dcbfd76bb" is forbidden: User "system:serviceaccount:openshift-cluster-storage-operator:vsphere-problem-detector-operator" cannot get resource "replicasets" in API group "apps" in the namespace "openshift-cluster-storage-operator"



Version-Release number of selected component (if applicable):
4.7.0-0.nightly-2021-01-31-031653

How reproducible:
Always

Steps to Reproduce:


Actual results:

Expected results:

Comment 2 Qin Ping 2021-02-03 13:47:35 UTC
Verified with: 4.7.0-0.nightly-2021-02-03-113456

Comment 7 errata-xmlrpc 2021-02-24 15:57:41 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:5633


Note You need to log in before you can comment on or make changes to this bug.