Skip to content
This repository has been archived by the owner on Oct 17, 2024. It is now read-only.

Missing addonplacementscores in cluster role #205

Open
rtrive opened this issue Feb 21, 2022 · 3 comments
Open

Missing addonplacementscores in cluster role #205

rtrive opened this issue Feb 21, 2022 · 3 comments

Comments

@rtrive
Copy link

rtrive commented Feb 21, 2022

K8S Version: 1.21.2
OLM Version: 0.20.0

When cluster manager in installed through OLM the clusterrole open-cluster-management:cluster-manager-placement:controller has not the addonplacementscores permission causing pod cluster-manager-placement-controllerto generate this error:

k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1alpha1.AddOnPlacementScore: failed to list *v1alpha1.AddOnPlacementScore: addonplacementscores.cluster.open-cluster-management.io is forbidden: User "system:serviceaccount:open-cluster-management-hub:cluster-manager-placement-controller-sa" cannot list resource "addonplacementscores" in API group "cluster.open-cluster-management.io" at the cluster scope

If the operator is installed through CLI the clusterrole contains the addonplacementscores permission

Proposal:

Add this commit into cluster role file for olm. Then you need to release a minor version 0.6.1

@qiujian16
Copy link
Member

yeah, I think we might need to do this

Thanks!

@qiujian16
Copy link
Member

/kind bug

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 14, 2022

@qiujian16: The label(s) kind/bug cannot be applied, because the repository doesn't have them.

In response to this:

/kind bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants