Hide Forgot
Description of problem: The `default` project missed the annotation : openshift.io/node-selector: "" So when scheduler with defaultNodeSelector, all the `oc debug node/nodename` command will failed unless specify the namespace with the annotation. Version-Release number of selected component (if applicable): How reproducible: always Steps to Reproduce: 1.Update the scheduler cluster to specify defaultNodeSelector: defaultNodeSelector: type=foo,region=foo 2.Run the `oc debug node/nodename` command Actual results: 2. The `oc debug node/nodename` always failed on all nodes without the defaultNodeSelector labels, must specify namespace with the annotation : openshift.io/node-selector: "" Expected results: 2. If the `default` project with annotation : openshift.io/node-selector: "" The `oc debug node/nodename` will always succeed. Additional info:
[root@localhost ~]# oc version Client Version: 4.10.0-202201041327.p0.g080f0de.assembly.stream-080f0de Server Version: 4.10.0-0.nightly-2022-01-06-183041 Kubernetes Version: v1.22.1+6859754
The whole story behind it is in https://bugzilla.redhat.com/show_bug.cgi?id=1812813 but the tl;dr is that: 1. we won't be changing annotations on default project 2. we will detect failure in creating debug pod and inform a user about such situation. Nothing more.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:0056