Bug 1966556
| Summary: | could not install descheduler on 4.6 cluster | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | RamaKasturi <knarra> | ||||||||
| Component: | kube-scheduler | Assignee: | Jan Chaloupka <jchaloup> | ||||||||
| Status: | CLOSED ERRATA | QA Contact: | RamaKasturi <knarra> | ||||||||
| Severity: | high | Docs Contact: | |||||||||
| Priority: | unspecified | ||||||||||
| Version: | 4.6 | CC: | aos-bugs, jchaloup, maszulik, mfojtik | ||||||||
| Target Milestone: | --- | ||||||||||
| Target Release: | 4.6.z | ||||||||||
| Hardware: | Unspecified | ||||||||||
| OS: | Unspecified | ||||||||||
| Whiteboard: | |||||||||||
| Fixed In Version: | Doc Type: | No Doc Update | |||||||||
| Doc Text: | Story Points: | --- | |||||||||
| Clone Of: | Environment: | ||||||||||
| Last Closed: | 2021-06-29 06:26:19 UTC | Type: | Bug | ||||||||
| Regression: | --- | Mount Type: | --- | ||||||||
| Documentation: | --- | CRM: | |||||||||
| Verified Versions: | Category: | --- | |||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||
| Embargoed: | |||||||||||
| Bug Depends On: | 1966603 | ||||||||||
| Bug Blocks: | |||||||||||
| Attachments: |
|
||||||||||
|
Description
RamaKasturi
2021-06-01 11:44:38 UTC
Created attachment 1788487 [details]
clusterkubedescheduleroperator.4.6.0-202106010807.p0.git.5db84c5
From the descheduler csv (full output in the attachment):
```
$ oc get csv -n openshift-kube-descheduler-operator clusterkubedescheduleroperator.4.6.0-202106010807.p0.git.5db84c5 -o yaml
...
requirementStatus:
- group: operators.coreos.com
kind: ClusterServiceVersion
message: CSV minKubeVersion (1.19.0) less than server version (v1.19.0+d670f74)
name: clusterkubedescheduleroperator.4.6.0-202106010807.p0.git.5db84c5
status: Present
version: v1alpha1
- group: apiextensions.k8s.io
kind: CustomResourceDefinition
message: CRD is present and Established condition is true
name: kubedeschedulers.operator.openshift.io
status: Present
uuid: b97f9cf5-a10e-478c-868b-17e540e284c3
version: v1
- dependents:
- group: rbac.authorization.k8s.io
kind: PolicyRule
message: cluster rule:{"verbs":["*"],"apiGroups":["operator.openshift.io"],"resources":["*"]}
status: NotSatisfied
version: v1
- group: rbac.authorization.k8s.io
kind: PolicyRule
message: cluster rule:{"verbs":["*"],"apiGroups":["kubedeschedulers.operator.openshift.io"],"resources":["*"]}
status: NotSatisfied
version: v1
- group: rbac.authorization.k8s.io
kind: PolicyRule
message: cluster rule:{"verbs":["*"],"apiGroups":[""],"resources":["services","pods","configmaps","secrets","names","nodes","pods/eviction","events"]}
status: NotSatisfied
version: v1
- group: rbac.authorization.k8s.io
kind: PolicyRule
message: cluster rule:{"verbs":["get","watch","list"],"apiGroups":["scheduling.k8s.io"],"resources":["priorityclasses"]}
status: NotSatisfied
version: v1
- group: rbac.authorization.k8s.io
kind: PolicyRule
message: cluster rule:{"verbs":["*"],"apiGroups":["apps"],"resources":["deployments","replicasets"]}
status: NotSatisfied
version: v1
group: ""
kind: ServiceAccount
message: Policy rule not satisfied for service account
name: openshift-descheduler
status: PresentNotSatisfied
version: v1
```
The status claims openshift-descheduler SA is not present. Even though the object exists in the cluster:
```$ oc get sa -n openshift-kube-descheduler-operator
NAME SECRETS AGE
builder 2 26m
default 2 26m
deployer 2 26m
openshift-descheduler 2 25m
```
Created attachment 1788490 [details]
install-mrspj
Created attachment 1788491 [details]
install-5ctfh.yaml
From the install plan:
```
message: 'error creating clusterrole clusterkubedescheduleroperator.4.6.0-202106010807.p0-666dc9cd49:
ClusterRole.rbac.authorization.k8s.io "clusterkubedescheduleroperator.4.6.0-202106010807.p0-666dc9cd49"
is invalid: metadata.labels: Invalid value: "clusterkubedescheduleroperator.4.6.0-202106010807.p0.git.5db84c5":
must be no more than 63 characters'
reason: InstallComponentFailed
status: "False"
type: Installed
```
Verified bug with payload below and i see that i could successfully install descheduler. [knarra@knarra ~]$ oc get csv NAME DISPLAY VERSION REPLACES PHASE clusterkubedescheduleroperator.4.6.0-202106021513 Kube Descheduler Operator 4.6.0-202106021513 Succeeded [knarra@knarra ~]$ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.6.0-0.nightly-2021-06-16-154412 True False 40m Cluster version is 4.6.0-0.nightly-2021-06-16-154412 [knarra@knarra ~]$ oc get pods NAME READY STATUS RESTARTS AGE cluster-8cb674d7f-djtmk 1/1 Running 0 59s descheduler-operator-575f87b94d-fc7z2 1/1 Running 0 3m27s Based on the above moving bug to verified state. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6.36 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:2498 |