Bug 2041467 - [SSP] Support custom DataImportCron creating in custom namespaces
Summary: [SSP] Support custom DataImportCron creating in custom namespaces
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Container Native Virtualization (CNV)
Classification: Red Hat
Component: SSP
Version: 4.10.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 4.11.0
Assignee: Felix Matouschek
QA Contact: Sarah Bennert
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-01-17 12:19 UTC by Ruth Netser
Modified: 2022-09-14 19:28 UTC (History)
4 users (show)

Fixed In Version: v4.11.0-40
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-09-14 19:28:30 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github kubevirt ssp-operator pull 355 0 None Merged Allow creating DataImportCrons in custom namespaces 2022-05-24 06:38:07 UTC
Github kubevirt ssp-operator pull 359 0 None open [release-v0.15] Allow creating DataImportCrons in custom namespaces 2022-05-24 07:34:22 UTC
Red Hat Issue Tracker CNV-15873 0 None None None 2022-02-28 07:10:43 UTC
Red Hat Product Errata RHSA-2022:6526 0 None None None 2022-09-14 19:28:56 UTC

Description Ruth Netser 2022-01-17 12:19:57 UTC
Description of problem:
Currently, golden images namespace is hardcoded in SSP.
If a user creates a dataImportCron via HCO, they cannot specify a custom namespace.
The dataImportCron will be created in the golden images namespace.


Version-Release number of selected component (if applicable):
CNV 4.10.0

How reproducible:
100%

Steps to Reproduce:
1. Add custom dataImportCron to HCO, set a namespace


Actual results:
SSP rejects the update

Expected results:
DataImportCron should be created in the custom namespace.

Additional info:
metadata:
  name: kubevirt-hyperconverged
spec:
  dataImportCronTemplates:
  - metadata:
      name: custom-data-import-cron
      namespace: golden-images-update-boot-source-test-ssp-data-import-crons
    spec:
      managedDataSource: dummy
      schedule: '* * * * *'
      template:
        spec:
          source:
            registry:
              url: registry.redhat.io/rhel8/rhel-guest-image
          storage:
            resources:
              requests:
                storage: 10Gi

Error:
E           HTTP response body: b'{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"admission webhook \\"validate-hco.kubevirt.io\\" denied the request: admission webhook \\"validation.ssp.kubevirt.io\\" denied the request: dataImportCronTemplates validation error: invalid namespace in DataImportCronTemplate custom-data-import-cron: must be empty or openshift-virtualization-os-images","reason":"dataImportCronTemplates validation error: invalid namespace in DataImportCronTemplate custom-data-import-cron: must be empty or openshift-virtualization-os-images","code":403}\n'

Comment 1 Sarah Bennert 2022-06-29 18:37:06 UTC
Verified
OCP 4.11.0-fc.0
CNV 4.11.0-518

Comment 4 errata-xmlrpc 2022-09-14 19:28:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Virtualization 4.11.0 Images security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:6526


Note You need to log in before you can comment on or make changes to this bug.