Description of problem: Getting the following response when trying to create a vm using the smoke tests from cnv-tests repository https://code.engineering.redhat.com/gerrit/admin/repos/cnv-tests. { "kind": "Status", "apiVersion": "v1", "metadata": {}, "status": "Failure", "message": "admission webhook \\" virtualmachine - validator.kubevirt.io\\ " denied the request: Authorization failed, message is: User system:serviceaccount:ssp-supported-os-common-templates-rhel-test-rhel-os-support:default has insufficient permissions in clone source namespace openshift-virtualization-os-images", "reason": "Invalid", "details": { "causes": [{ "reason": "FieldValueInvalid", "message": "Authorization failed, message is: User system:serviceaccount:ssp-supported-os-common-templates-rhel-test-rhel-os-support:default has insufficient permissions in clone source namespace openshift-virtualization-os-images", "field": "spec.dataVolumeTemplates[0]" }] } A build with some logs: https://main-jenkins-csb-cnvqe.apps.ocp-c1.prod.psi.redhat.com/job/verify-cnv-4.11.z-build/56/consoleFull How reproducible: 100 Steps to Reproduce: 1. Install CNV-v4.11.0-108 from iib:192344. Actual results: Expected results: Additional info:
Is the behavior reproducible in 4.10 ?
No, this behavior is not reproducible in 4.10. Just on 4.11 - and it's still reproducible (validated again).
This bug may have been caused by a change in SSP, that caused the d/s build to be incorrect. This PR should fix it: https://github.com/kubevirt/ssp-operator/pull/326 A d/s patch will be needed too.
*** Bug 2066223 has been marked as a duplicate of this bug. ***
Can verify that the bug is not hitting again on RHEL8 builds. Will fully verify when I see that also RHEL9 builds are passing just to make sure.
Alright after few GREEN builds of RHEL9 based CNV-4.11 I can verify that we don't get this issue anymore. Thanks !
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: OpenShift Virtualization 4.11.0 Images security and bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:6526