Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug bash: member agent can't join after hub used the wrong identity and then used the right one again. #187

Open
circy9 opened this issue Jul 20, 2022 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@circy9
Copy link
Contributor

circy9 commented Jul 20, 2022

Changed membercluster to use the wrong identity at 18:51, and changed membercluster to use the correct identity at 19:03

k logs hub-agent-579b5f9868-x45xh -n fleet-system
I0720 18:51:29.000566 1 membercluster_controller.go:265] "the role binding is different from what is expected, updating" roleBinding="fleet-rolebinding-membercluster-sample" memberCluster="membercluster-sample"
I0720 19:03:03.034474 1 membercluster_controller.go:265] "the role binding is different from what is expected, updating" roleBinding="fleet-rolebinding-membercluster-sample" memberCluster="membercluster-sample"

k logs member-agent-578f5654dd-hqhpl member-agent -n fleet-system
E0720 19:02:54.874560 1 member_controller.go:152] "failed to update internal member cluster status" err="internalmemberclusters.fleet.azure.com "membercluster-sample" is forbidden: User "d9757858-807b-44f9-95ed-1dffe891fa95" cannot update resource "internalmemberclusters/status" in API group "fleet.azure.com" in the namespace "fleet-member-membercluster-sample": User does not have access to the resource in Azure. Update role assignment to allow access." InternalMemberCluster="fleet-member-membercluster-sample/membercluster-sample"
E0720 19:02:55.221390 1 member_controller.go:152] "failed to update internal member cluster status" err="internalmemberclusters.fleet.azure.com "membercluster-sample" is forbidden: User "d9757858-807b-44f9-95ed-1dffe891fa95" cannot update resource "internalmemberclusters/status" in API group "fleet.azure.com" in the namespace "fleet-member-membercluster-sample": User does not have access to the resource in Azure. Update role assignment to allow access." InternalMemberCluster="fleet-member-membercluster-sample/membercluster-sample"
E0720 19:02:55.221453 1 member_controller.go:80] "reconcile failed" err="failed to set internal member cluster heartbeat for fleet-member-membercluster-sample/membercluster-sample: internalmemberclusters.fleet.azure.com "membercluster-sample" is forbidden: User "d9757858-807b-44f9-95ed-1dffe891fa95" cannot update resource "internalmemberclusters/status" in API group "fleet.azure.com" in the namespace "fleet-member-membercluster-sample": User does not have access to the resource in Azure. Update role assignment to allow access."
I0720 19:03:17.737445 1 reflector.go:255] Listing and watching *v1alpha1.InternalMemberCluster from pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167

@ryanzhang-oss ryanzhang-oss added the bug Something isn't working label Sep 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants