search

kubernetes / cloud-provider-openstack

Apache License 2.0
619 stars 611 forks source link

[occm] Helm Chart has wrong Service Account Name #1973

Closed shaardie closed 2 years ago

shaardie commented 2 years ago

Is this a BUG REPORT or FEATURE REQUEST?:

Uncomment only one, leave it on its own line:

/kind bug /kind feature

What happened: ServiceAccount name in the Helm Chart is openstack-cloud-controller-manager, but according to the logs occm is using cloud-controller-manager.

What you expected to happen:

ServiceAccount should either be named cloud-controller-manager or occm should use openstack-cloud-controller-manager

How to reproduce it:

I encountered this during an update of an load balancer service where I go the following error:

E0829 10:57:36.377475       1 controller.go:310] error processing service namespace/service (will retry): failed to ensure load balancer: failed to patch service object namespace/service: services "service" is forbidden: User "system:serviceaccount:kube-system:cloud-controller-manager" cannot patch resource "services" in API group "" in the namespace "namespace"

Anything else we need to know?:

Environment:

jichenjc commented 2 years ago

is this related to https://github.com/kubernetes/cloud-provider-openstack/issues/1722 ? I remember we had a fix for it already..

shaardie commented 2 years ago

Ah, my bad. Thanks for the explanation. My problem was exactly what was fixed in https://github.com/kubernetes/cloud-provider-openstack/pull/1802. I just assumed it was the service account name. I will close this issue again.