observatorium / thanos-receive-controller

Kubernetes controller to automatically configure Thanos receive hashrings
Apache License 2.0
96 stars 46 forks source link

Reconciliation loop fails on save hashring #110

Closed philipgough closed 1 year ago

philipgough commented 1 year ago

In an OpenShift 4.12.x environment, we see the following log with the latest commit built from main

level=error caller=main.go:572 ts=2023-03-30T11:14:16.976340006Z msg="failed to save hashrings" err="configmaps \"observatorium-thanos-receive-controller-tenants-generated\" is forbidden: cannot set an ownerRef on a resource you can't delete: , <nil>"

It appears the creation of an owner ref has been in place since #62 but looks like we are missing some perms in the Role created via jsonnet.