After some investigation, it looks like sometimes apps are started before the arbiter permissions are configured. In container-manager.js#L208 createService is called before addPermissionsFromSla so if the app starts quickly (the image has already been downloaded) then the app starts before its permissions are granted. This causes errors after an app/driver is reinstalled.
After some investigation, it looks like sometimes apps are started before the arbiter permissions are configured. In container-manager.js#L208 createService is called before addPermissionsFromSla so if the app starts quickly (the image has already been downloaded) then the app starts before its permissions are granted. This causes errors after an app/driver is reinstalled.