[release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568

openshift-cherrypick-robot · 2022-02-24T11:55:00Z

This is an automated cherry-pick of #1564

/assign bison

The cluster-monitoring-operator reads the owner reference for its pod, and fetches that ReplicaSet as part of setting up event recording. None of the mixed-in permissions end up allowing GET actions on these, so the fetch fails and an error is reported in the logs. This adds the permission explicitly.

openshift-ci · 2022-02-24T11:55:14Z

@openshift-cherrypick-robot: Bugzilla bug 2057403 has been cloned as Bugzilla bug 2058148. Retitling PR to link against new bug.
/retitle [release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-ci · 2022-02-24T11:55:27Z

@openshift-cherrypick-robot: This pull request references Bugzilla bug 2058148, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker.

6 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target release (4.10.0) matches configured target release for branch (4.10.0)
bug is in the state NEW, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)
dependent bug Bugzilla bug 2057403 is in the state ON_QA, which is one of the valid states (MODIFIED, ON_QA, VERIFIED)
dependent Bugzilla bug 2057403 targets the "4.11.0" release, which is one of the valid target releases: 4.11.0
bug has dependents

Requesting review from QA contact:
/cc @lihongyan1

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

bison · 2022-02-24T11:58:05Z

/bugzilla refresh

openshift-ci · 2022-02-24T11:58:10Z

@bison: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

bison · 2022-02-24T11:58:43Z

/bugzilla refresh

openshift-ci · 2022-02-24T11:58:50Z

@bison: This pull request references Bugzilla bug 2058148, which is valid.

6 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target release (4.10.0) matches configured target release for branch (4.10.0)
bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)
dependent bug Bugzilla bug 2057403 is in the state ON_QA, which is one of the valid states (MODIFIED, ON_QA, VERIFIED)
dependent Bugzilla bug 2057403 targets the "4.11.0" release, which is one of the valid target releases: 4.11.0
bug has dependents

Requesting review from QA contact:
/cc @lihongyan1

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

prashbnair · 2022-02-24T13:21:30Z

/lgtm

openshift-bot · 2022-02-24T13:57:16Z

/retest-required

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2022-02-24T15:38:21Z

/retest-required

Please review the full test history for this PR and help us cut down flakes.

openshift-ci · 2022-02-24T15:52:24Z

@openshift-cherrypick-robot: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/versions	`76195b6`	link	false	`/test versions`

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

philipgough · 2022-02-24T16:02:49Z

/skip

lihongyan1 · 2022-02-25T03:16:35Z

/label cherry-pick-approved

juzhao · 2022-02-25T03:48:34Z

issue is fixed in 4.10
/label qe-approved

bison · 2022-03-04T10:14:42Z

/bugzilla refresh

openshift-ci · 2022-03-04T10:14:50Z

@bison: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

bison · 2022-03-04T10:29:46Z

This can definitely wait for 4.10.z, which I thought was open now. Not sure why the bug is still considered invalid.

openshift-bot · 2022-03-05T01:00:42Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-05T01:01:01Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-bot · 2022-03-06T01:00:23Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-06T01:00:43Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-bot · 2022-03-07T01:00:27Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-07T01:00:42Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-ci · 2022-03-07T11:50:09Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: openshift-cherrypick-robot, PhilipGough, prashbnair

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [PhilipGough,prashbnair]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-bot · 2022-03-08T01:00:26Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-08T01:00:42Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-bot · 2022-03-09T01:01:10Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-09T01:01:27Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-bot · 2022-03-10T01:00:37Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-10T01:00:53Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is invalid:

expected the bug to target the "4.10.0" release, but it targets "4.10.z" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-bot · 2022-03-11T01:00:35Z

/bugzilla refresh

Recalculating validity in case the underlying Bugzilla bug has changed.

openshift-ci · 2022-03-11T01:01:32Z

@openshift-bot: This pull request references Bugzilla bug 2058148, which is valid.

6 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target release (4.10.z) matches configured target release for branch (4.10.z)
bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)
dependent bug Bugzilla bug 2057403 is in the state VERIFIED, which is one of the valid states (VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE))
dependent Bugzilla bug 2057403 targets the "4.11.0" release, which is one of the valid target releases: 4.11.0
bug has dependents

Requesting review from QA contact:
/cc @lihongyan1

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

jan--f · 2022-03-11T10:51:10Z

/label backport-risk-assessed

openshift-ci · 2022-03-11T10:52:17Z

@openshift-cherrypick-robot: All pull requests linked via external trackers have merged:

openshift/cluster-monitoring-operator#1568

Bugzilla bug 2058148 has been moved to the MODIFIED state.

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-ci bot assigned bison Feb 24, 2022

openshift-cherrypick-robot mentioned this pull request Feb 24, 2022

Bug 2057403: jsonnet: Give CMO explicit get permissions for ReplicaSets #1564

Merged

2 tasks

openshift-ci bot changed the title ~~[release-4.10] Bug 2057403: jsonnet: Give CMO explicit get permissions for ReplicaSets~~ [release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets Feb 24, 2022

openshift-ci bot added bugzilla/severity-low Referenced Bugzilla bug's severity is low for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. labels Feb 24, 2022

openshift-ci bot requested review from lihongyan1, prashbnair and slashpai February 24, 2022 11:55

openshift-ci bot added bugzilla/invalid-bug Indicates that a referenced Bugzilla bug is invalid for the branch this PR is targeting. and removed bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. labels Feb 24, 2022

openshift-ci bot added bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. and removed bugzilla/invalid-bug Indicates that a referenced Bugzilla bug is invalid for the branch this PR is targeting. labels Feb 24, 2022

openshift-ci bot assigned prashbnair Feb 24, 2022

openshift-ci bot added lgtm Indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Feb 24, 2022

openshift-ci bot added the cherry-pick-approved Indicates a cherry-pick PR into a release branch has been approved by the release branch manager. label Feb 25, 2022

openshift-ci bot added the qe-approved Signifies that QE has signed off on this PR label Feb 25, 2022

openshift-ci bot added bugzilla/invalid-bug Indicates that a referenced Bugzilla bug is invalid for the branch this PR is targeting. and removed bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. labels Mar 4, 2022

philipgough approved these changes Mar 7, 2022

View reviewed changes

openshift-ci bot added bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. and removed bugzilla/invalid-bug Indicates that a referenced Bugzilla bug is invalid for the branch this PR is targeting. labels Mar 11, 2022

openshift-ci bot added the backport-risk-assessed Indicates a PR to a release branch has been evaluated and considered safe to accept. label Mar 11, 2022

openshift-merge-robot merged commit 85f0ee9 into openshift:release-4.10 Mar 11, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568

[release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568

openshift-cherrypick-robot commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

bison commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

bison commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

prashbnair commented Feb 24, 2022

openshift-bot commented Feb 24, 2022

openshift-bot commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

philipgough commented Feb 24, 2022

lihongyan1 commented Feb 25, 2022

juzhao commented Feb 25, 2022

bison commented Mar 4, 2022

openshift-ci bot commented Mar 4, 2022

bison commented Mar 4, 2022

openshift-bot commented Mar 5, 2022

openshift-ci bot commented Mar 5, 2022

openshift-bot commented Mar 6, 2022

openshift-ci bot commented Mar 6, 2022

openshift-bot commented Mar 7, 2022

openshift-ci bot commented Mar 7, 2022

openshift-ci bot commented Mar 7, 2022

openshift-bot commented Mar 8, 2022

openshift-ci bot commented Mar 8, 2022

openshift-bot commented Mar 9, 2022

openshift-ci bot commented Mar 9, 2022

openshift-bot commented Mar 10, 2022

openshift-ci bot commented Mar 10, 2022

openshift-bot commented Mar 11, 2022

openshift-ci bot commented Mar 11, 2022

jan--f commented Mar 11, 2022

openshift-ci bot commented Mar 11, 2022

[release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568

[release-4.10] Bug 2058148: jsonnet: Give CMO explicit get permissions for ReplicaSets #1568

Conversation

openshift-cherrypick-robot commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

bison commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

bison commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

prashbnair commented Feb 24, 2022

openshift-bot commented Feb 24, 2022

openshift-bot commented Feb 24, 2022

openshift-ci bot commented Feb 24, 2022

philipgough commented Feb 24, 2022

lihongyan1 commented Feb 25, 2022

juzhao commented Feb 25, 2022

bison commented Mar 4, 2022

openshift-ci bot commented Mar 4, 2022

bison commented Mar 4, 2022

openshift-bot commented Mar 5, 2022

openshift-ci bot commented Mar 5, 2022

openshift-bot commented Mar 6, 2022

openshift-ci bot commented Mar 6, 2022

openshift-bot commented Mar 7, 2022

openshift-ci bot commented Mar 7, 2022

openshift-ci bot commented Mar 7, 2022

openshift-bot commented Mar 8, 2022

openshift-ci bot commented Mar 8, 2022

openshift-bot commented Mar 9, 2022

openshift-ci bot commented Mar 9, 2022

openshift-bot commented Mar 10, 2022

openshift-ci bot commented Mar 10, 2022

openshift-bot commented Mar 11, 2022

openshift-ci bot commented Mar 11, 2022

jan--f commented Mar 11, 2022

openshift-ci bot commented Mar 11, 2022