cybozu-go / coil

CNI plugin for Kubernetes designed for scalability and extensibility
Apache License 2.0
158 stars 18 forks source link

Unable to delete AddressPool #268

Closed masa213f closed 2 months ago

masa213f commented 6 months ago

Describe the bug Unable to delete AddressPool

Environments

To Reproduce

Create an AddressPool and Delete it.

$ kubectl apply -f <manifest file of AddressPool>
$ kubectl delete addresspool <AddressPool Name>

Then coil-controller outputs the following error.

{
  "level": "error",
  "ts": "2023-12-12T02:04:11Z",
  "msg": "Reconciler error",
  "controller": "addresspool",
  "controllerGroup": "coil.cybozu.com",
  "controllerKind": "AddressPool",
  "AddressPool": {
    "name": "test"
  },
  "namespace": "",
  "name": "test",
  "reconcileID": "6f2ae24d-86de-4ec0-b52c-96ded1c22ae6",
  "error": "failed to remove finalizer from address pool: addresspools.coil.cybozu.com \"test\" is forbidden: User \"system:serviceaccount:kube-system:coil-controller\" cannot update resource \"addresspools\" in API group \"coil.cybozu.com\" at the cluster scope",
  "stacktrace": "sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.3/pkg/internal/controller/controller.go:324\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.3/pkg/internal/controller/controller.go:265\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.3/pkg/internal/controller/controller.go:226"
}

Expected behavior A clear and concise description of what you expected to happen.

Additional context Add any other context about the problem here.