search

IBM / cloudpak-gitops

Deployment of IBM Cloud Paks using ArgoCD / Red Hat GitOps operator.
Apache License 2.0
22 stars 23 forks source link

OpenLDAP configuration for Cloud Pak for Security failing due to permissions #140

Closed nastacio closed 2 years ago

nastacio commented 2 years ago

Describe the bug A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

  1. Follow instructions in this repo to install CP4S
  2. Wait for all synchronization to complete

The cp4s-openldap post sync resource fails with the following message, indicating that the product 

+ '[' false == true ']'
+ export HOME=/tmp
+ HOME=/tmp
+ result=0
+ cd /tmp
+ oc project ibm-cloudpaks
error: You are not a member of project "ibm-cloudpaks".
You are not a member of any projects. You can request a project to be created with the 'new-project' command.
+ result=1
+ '[' 1 -eq 0 ']'
+ '[' 1 -eq 1 ']'
+ oc delete secret cp4s-openldap-creds
Error from server (Forbidden): secrets "cp4s-openldap-creds" is forbidden: User "system:serviceaccount:openshift-gitops:ibm-cloudpaks-installer" cannot delete resource "secrets" in API group "" in the namespace "openshift-gitops"

Expected behavior Synchronization should complete successfully.

Screenshots If applicable, add screenshots to help explain your problem.

Additional context Add any other context about the problem here.