[1.7.5] Failed to start operator

[heiko-braun]

with bash install_ocp.sh and some tricks to access brew images, I get this error when the operator starts:

{"level":"info","ts":1562927855.5895364,"logger":"cmd","msg":"Using template","template":"/conf/syndesis-template.yaml"}
{"level":"info","ts":1562927855.589842,"logger":"cmd","msg":"Go Version: go1.10.2"}
{"level":"info","ts":1562927855.5898652,"logger":"cmd","msg":"Go OS/Arch: linux/amd64"}
{"level":"info","ts":1562927855.5899286,"logger":"cmd","msg":"Version of operator-sdk: v0.8.0"}
{"level":"info","ts":1562927855.590316,"logger":"leader","msg":"Trying to become the leader."}
{"level":"error","ts":1562927855.7130342,"logger":"k8sutil","msg":"Failed to get Pod","Pod.Namespace":"1-7-4","Pod.Name":"syndesis-operator-1-mp7fr","error":"pods \"syndesis-operator-1-mp7fr\" is forbidden: User \"system:serviceaccount:1-7-4:syndesis-operator\" cannot get pods in the namespace \"1-7-4\": no RBAC policy matched","stacktrace":"github.com/syndesisio/syndesis/install/operator/vendor/github.com/go-logr/zapr.(*zapLogger).Error\n\t/go/src/github.com/syndesisio/syndesis/install/operator/vendor/github.com/go-logr/zapr/zapr.go:128\ngithub.com/syndesisio/syndesis/install/operator/vendor/github.com/operator-framework/operator-sdk/pkg/k8sutil.GetPod\n\t/go/src/github.com/syndesisio/syndesis/install/operator/vendor/github.com/operator-framework/operator-sdk/pkg/k8sutil/k8sutil.go:105\ngithub.com/syndesisio/syndesis/install/operator/vendor/github.com/operator-framework/operator-sdk/pkg/leader.myOwnerRef\n\t/go/src/github.com/syndesisio/syndesis/install/operator/vendor/github.com/operator-framework/operator-sdk/pkg/leader/leader.go:142\ngithub.com/syndesisio/syndesis/install/operator/vendor/github.com/operator-framework/operator-sdk/pkg/leader.Become\n\t/go/src/github.com/syndesisio/syndesis/install/operator/vendor/github.com/operator-framework/operator-sdk/pkg/leader/leader.go:67\nmain.main\n\t/go/src/github.com/syndesisio/syndesis/install/operator/cmd/syndesis-operator/main.go:70\nruntime.main\n\t/opt/rh/go-toolset-7/root/usr/lib/go-toolset-7-golang/src/runtime/proc.go:198"}
{"level":"error","ts":1562927855.7132056,"logger":"cmd","msg":"","error":"pods \"syndesis-operator-1-mp7fr\" is forbidden: User \"system:serviceaccount:1-7-4:syndesis-operator\" cannot get pods in the namespace \"1-7-4\": no RBAC policy matched","stacktrace":"github.com/syndesisio/syndesis/install/operator/vendor/github.com/go-logr/zapr.(*zapLogger).Error\n\t/go/src/github.com/syndesisio/syndesis/install/operator/vendor/github.com/go-logr/zapr/zapr.go:128\nmain.main\n\t/go/src/github.com/syndesisio/syndesis/install/operator/cmd/syndesis-operator/main.go:72\nruntime.main\n\t/opt/rh/go-toolset-7/root/usr/lib/go-toolset-7-golang/src/runtime/proc.go:198"}

[heiko-braun]

User \"system:serviceaccount:1-7-4:syndesis-operator\" cannot get pods in the namespace 

[nicolaferraro]

That indicates usually that the role associated with the operator service account has not been installed. Can you see errors in the logs?

I'll try full installation later btw.

[nicolaferraro]

Yes, this should be merged: #144

[nicolaferraro]

Otherwise it requires more roles than the standard user account and the role is not created

[heiko-braun]

That's commit is in 1.7.5 (merged with #145), but the problem remains the same...

[heiko-braun]

Works like charm on 1.7.7