Bug 2056375 - reconcilePrecaching error: cannot list resource "clusterserviceversions" in API group "operators.coreos.com" at the cluster scope"
Summary: reconcilePrecaching error: cannot list resource "clusterserviceversions" in A...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Telco Edge
Version: 4.10
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: ---
: 4.11.0
Assignee: Vitaly Grinberg
QA Contact: yliu1
URL:
Whiteboard:
Depends On:
Blocks: 2056374 2056572
TreeView+ depends on / blocked
 
Reported: 2022-02-21 05:45 UTC by Vitaly Grinberg
Modified: 2022-08-26 16:43 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of: 2056374
Environment:
Last Closed: 2022-08-26 16:43:57 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift-kni cluster-group-upgrades-operator pull 92 0 None open Bug 2056375: Allow clusterserviceversion access 2022-02-21 06:01:24 UTC

Description Vitaly Grinberg 2022-02-21 05:45:12 UTC 
+++ This bug was initially created as a clone of Bug #2056374 +++

Description of problem:
Attempt to start ocp image precaching with direct image url. Image precachine does not start with  cannot list resource "clusterserviceversions"

Version-Release number of selected component (if applicable):
4.10

How reproducible:

100%

Steps to Reproduce:
1. Deploy the CGU operator and configure precaching
2.
3.

Actual results:
2022-02-18T09:05:55.925Z	ERROR	controllers.ClusterGroupUpgrade	reconcilePrecaching error	{"error": "clusterserviceversions.operators.coreos.com is forbidden: User \"system:serviceaccount:openshift-cluster-group-upgrades:cluster-group-upgrades-controller-manager\" cannot list resource \"clusterserviceversions\" in API group \"operators.coreos.com\" at the cluster scope"}


Expected results:
Precaching starts 

Additional info:
Comment 2 yliu1 2022-02-25 19:25:33 UTC 
Verified on TALO master branch. Precache started using direct image url in CV policy.

    precaching:
      clusters:
      - helix21-0
      spec:
        platformImage: registry.ci.openshift.org/ocp/release@sha256:fd96300600f9585e5847f5855ca14e2b3cafbce12aefe3b3f52c5da10c4476eb
      status:
        helix21-0: PreparingToStart
    status: {}
Note You need to log in before you can comment on or make changes to this bug.