Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ClusterExtension status/condition not getting updated #1192

Closed
perdasilva opened this issue Aug 29, 2024 · 1 comment · Fixed by #1119
Closed

ClusterExtension status/condition not getting updated #1192

perdasilva opened this issue Aug 29, 2024 · 1 comment · Fixed by #1119
Labels
bug/release-blocker issue identified as something which should be solved before we can release a new version kind/bug Categorizes issue or PR as related to a bug.

Comments

@perdasilva
Copy link
Contributor

After applying the following manifest (which includes, namespace, clusterrole, role, etc. all the way to ce):

---
apiVersion: v1
kind: Namespace
metadata:
  name: zookeeper-operator-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: zookeeper-operator-installer
  namespace: zookeeper-operator-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: zookeeper-operator-installer-cluster-role
rules: [
  {
    "apiGroups": [
      "olm.operatorframework.io"
    ],
    "resources": [
      "clusterextensions/finalizers"
    ],
    "verbs": [
      "update"
    ],
    "resourceNames": [
      "zookeeper-operator"
    ]
  },
  {
    "apiGroups": [
      "apiextensions.k8s.io"
    ],
    "resources": [
      "customresourcedefinitions"
    ],
    "verbs": [
      "create",
      "list",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "apiextensions.k8s.io"
    ],
    "resources": [
      "customresourcedefinitions"
    ],
    "verbs": [
      "get",
      "update",
      "patch",
      "delete"
    ],
    "resourceNames": [
      "zookeeperclusters.zookeeper.streamnative.io"
    ]
  },
  {
    "apiGroups": [
      "rbac.authorization.k8s.io"
    ],
    "resources": [
      "clusterroles"
    ],
    "verbs": [
      "create"
    ]
  },
  {
    "apiGroups": [
      "rbac.authorization.k8s.io"
    ],
    "resources": [
      "clusterroles"
    ],
    "verbs": [
      "get",
      "list",
      "watch",
      "update",
      "patch",
      "delete"
    ],
    "resourceNames": [
      "zookeeper-operator-metrics-reader",
      "zookeeper-operator-35zvrk4dltmhe07cy356ua505iw96ivt7id1zgsw9m0c",
      "zookeeper-operator-1bisf6yvt0wfjl1j8qzv3law61zq4addw446qp0b1594"
    ]
  },
  {
    "nonResourceURLs": [
      "/metrics"
    ],
    "verbs": [
      "get"
    ]
  },
  {
    "apiGroups": [
      "apps"
    ],
    "resources": [
      "statefulsets"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "coordination.k8s.io"
    ],
    "resources": [
      "leases"
    ],
    "verbs": [
      "create",
      "get",
      "list",
      "update"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "configmaps"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "persistentvolumeclaims"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "pods"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "services"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "networking.istio.io"
    ],
    "resources": [
      "*"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "policy"
    ],
    "resources": [
      "poddisruptionbudgets"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "security.istio.io"
    ],
    "resources": [
      "*"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "zookeeper.streamnative.io"
    ],
    "resources": [
      "zookeeperclusters"
    ],
    "verbs": [
      "create",
      "delete",
      "get",
      "list",
      "patch",
      "update",
      "watch"
    ]
  },
  {
    "apiGroups": [
      "zookeeper.streamnative.io"
    ],
    "resources": [
      "zookeeperclusters/finalizers"
    ],
    "verbs": [
      "update"
    ]
  },
  {
    "apiGroups": [
      "zookeeper.streamnative.io"
    ],
    "resources": [
      "zookeeperclusters/status"
    ],
    "verbs": [
      "get",
      "patch",
      "update"
    ]
  },
  {
    "apiGroups": [
      "authentication.k8s.io"
    ],
    "resources": [
      "tokenreviews"
    ],
    "verbs": [
      "create"
    ]
  },
  {
    "apiGroups": [
      "authorization.k8s.io"
    ],
    "resources": [
      "subjectaccessreviews"
    ],
    "verbs": [
      "create"
    ]
  },
  {
    "apiGroups": [
      "rbac.authorization.k8s.io"
    ],
    "resources": [
      "clusterrolebindings"
    ],
    "verbs": [
      "create"
    ]
  },
  {
    "apiGroups": [
      "rbac.authorization.k8s.io"
    ],
    "resources": [
      "clusterrolebindings"
    ],
    "verbs": [
      "get",
      "list",
      "watch",
      "update",
      "patch",
      "delete"
    ],
    "resourceNames": [
      "zookeeper-operator-35zvrk4dltmhe07cy356ua505iw96ivt7id1zgsw9m0c",
      "zookeeper-operator-1bisf6yvt0wfjl1j8qzv3law61zq4addw446qp0b1594"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "configmaps"
    ],
    "verbs": [
      "get",
      "list",
      "watch",
      "create",
      "update",
      "patch",
      "delete"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "configmaps/status"
    ],
    "verbs": [
      "get",
      "update",
      "patch"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "events"
    ],
    "verbs": [
      "create",
      "patch"
    ]
  }
]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: zookeeper-operator-installer-cluster-role-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: zookeeper-operator-installer-cluster-role
subjects:
  - kind: ServiceAccount
    name: zookeeper-operator-installer
    namespace: zookeeper-operator-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: zookeeper-operator-installer-installer-role
  namespace: zookeeper-operator-system
rules: [
  {
    "apiGroups": [
      "apps"
    ],
    "resources": [
      "deployments"
    ],
    "verbs": [
      "create"
    ]
  },
  {
    "apiGroups": [
      "apps"
    ],
    "resources": [
      "deployments"
    ],
    "verbs": [
      "get",
      "list",
      "watch",
      "update",
      "patch",
      "delete"
    ],
    "resourceNames": [
      "zookeeper-operator-controller-manager"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "serviceaccounts"
    ],
    "verbs": [
      "create"
    ]
  },
  {
    "apiGroups": [
      ""
    ],
    "resources": [
      "serviceaccounts"
    ],
    "verbs": [
      "get",
      "list",
      "watch",
      "update",
      "patch",
      "delete"
    ],
    "resourceNames": [
      "zookeeper-operator-controller-manager"
    ]
  }
]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: zookeeper-operator-installer-installer-role-binding
  namespace: zookeeper-operator-system
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: zookeeper-operator-installer-installer-role
subjects:
  - kind: ServiceAccount
    name: zookeeper-operator-installer
    namespace: zookeeper-operator-system
---
apiVersion: olm.operatorframework.io/v1alpha1
kind: ClusterExtension
metadata:
  name: zookeeper-operator
spec:
  installNamespace: zookeeper-operator-system
  packageName: zookeeper-operator
  version: 0.17.9
  serviceAccount:
    name: zookeeper-operator-installer

O-C logs show RBAC failures:

W0829 17:23:26.675538       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "serviceaccounts" in API group "" at the cluster scope
E0829 17:23:26.675566       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch /v1, Kind=ServiceAccount: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"serviceaccounts\" in API group \"\" at the cluster scope" logger="UnhandledError"
W0829 17:23:26.675985       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:26.676007       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterrolebindings\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:26.676018       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:26.676034       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRole: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterroles\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:26.676905       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "deployments" in API group "apps" at the cluster scope
E0829 17:23:26.676921       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch apps/v1, Kind=Deployment: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"deployments\" in API group \"apps\" at the cluster scope" logger="UnhandledError"
W0829 17:23:27.600414       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:27.600442       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRole: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterroles\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:27.815889       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "serviceaccounts" in API group "" at the cluster scope
E0829 17:23:27.815915       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch /v1, Kind=ServiceAccount: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"serviceaccounts\" in API group \"\" at the cluster scope" logger="UnhandledError"
W0829 17:23:28.102639       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:28.102666       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterrolebindings\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:28.222938       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "deployments" in API group "apps" at the cluster scope
E0829 17:23:28.222964       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch apps/v1, Kind=Deployment: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"deployments\" in API group \"apps\" at the cluster scope" logger="UnhandledError"
W0829 17:23:29.820292       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "serviceaccounts" in API group "" at the cluster scope
E0829 17:23:29.820320       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch /v1, Kind=ServiceAccount: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"serviceaccounts\" in API group \"\" at the cluster scope" logger="UnhandledError"
W0829 17:23:30.321084       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "deployments" in API group "apps" at the cluster scope
E0829 17:23:30.321112       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch apps/v1, Kind=Deployment: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"deployments\" in API group \"apps\" at the cluster scope" logger="UnhandledError"
W0829 17:23:30.592626       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:30.592646       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRole: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterroles\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:31.129252       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:31.129282       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterrolebindings\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:34.021541       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "serviceaccounts" in API group "" at the cluster scope
E0829 17:23:34.021573       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch /v1, Kind=ServiceAccount: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"serviceaccounts\" in API group \"\" at the cluster scope" logger="UnhandledError"
W0829 17:23:35.907538       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "deployments" in API group "apps" at the cluster scope
E0829 17:23:35.907566       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch apps/v1, Kind=Deployment: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"deployments\" in API group \"apps\" at the cluster scope" logger="UnhandledError"
W0829 17:23:36.871987       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:36.872014       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterrolebindings\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:36.871988       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:36.872032       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRole: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterroles\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:42.425441       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "serviceaccounts" in API group "" at the cluster scope
E0829 17:23:42.425468       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch /v1, Kind=ServiceAccount: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"serviceaccounts\" in API group \"\" at the cluster scope" logger="UnhandledError"
W0829 17:23:45.650514       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterrolebindings" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:45.650541       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRoleBinding: clusterrolebindings.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterrolebindings\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:48.495831       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "deployments" in API group "apps" at the cluster scope
E0829 17:23:48.495859       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch apps/v1, Kind=Deployment: failed to list apps/v1, Kind=Deployment: deployments.apps is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"deployments\" in API group \"apps\" at the cluster scope" logger="UnhandledError"
W0829 17:23:49.042792       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope
E0829 17:23:49.042824       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch rbac.authorization.k8s.io/v1, Kind=ClusterRole: failed to list rbac.authorization.k8s.io/v1, Kind=ClusterRole: clusterroles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"clusterroles\" in API group \"rbac.authorization.k8s.io\" at the cluster scope" logger="UnhandledError"
W0829 17:23:56.559892       1 reflector.go:561] pkg/cache/internal/informers.go:106: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User "system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer" cannot list resource "serviceaccounts" in API group "" at the cluster scope
E0829 17:23:56.559918       1 reflector.go:158] "Unhandled Error" err="pkg/cache/internal/informers.go:106: Failed to watch /v1, Kind=ServiceAccount: failed to list /v1, Kind=ServiceAccount: serviceaccounts is forbidden: User \"system:serviceaccount:zookeeper-operator-system:zookeeper-operator-installer\" cannot list resource \"serviceaccounts\" in API group \"\" at the cluster scope" logger="UnhandledError"

But status is not updated:

apiVersion: v1
items:
- apiVersion: olm.operatorframework.io/v1alpha1
  kind: ClusterExtension
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"olm.operatorframework.io/v1alpha1","kind":"ClusterExtension","metadata":{"annotations":{},"name":"zookeeper-operator"},"spec":{"installNamespace":"zookeeper-operator-system","packageName":"zookeeper-operator","serviceAccount":{"name":"zookeeper-operator-installer"},"version":"0.17.9"}}
    creationTimestamp: "2024-08-29T17:42:54Z"
    finalizers:
    - olm.operatorframework.io/cleanup-unpack-cache
    generation: 2
    name: zookeeper-operator
    resourceVersion: "1450"
    uid: f1b041a0-7483-4925-bc1b-e4e2d42a9162
  spec:
    catalogSelector: {}
    installNamespace: zookeeper-operator-system
    packageName: zookeeper-operator
    serviceAccount:
      name: zookeeper-operator-installer
    upgradeConstraintPolicy: Enforce
    version: 0.17.9
kind: List
metadata:
  resourceVersion: ""
@perdasilva perdasilva added kind/bug Categorizes issue or PR as related to a bug. bug/release-blocker issue identified as something which should be solved before we can release a new version labels Aug 29, 2024
@everettraven
Copy link
Contributor

This should be resolved by #1119

@everettraven everettraven mentioned this issue Sep 3, 2024
Merged
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug/release-blocker issue identified as something which should be solved before we can release a new version kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Milestone
No milestone
2 participants
@perdasilva @everettraven