Azure / Azure/fleet

bug bash: member agent can't join after hub used the wrong identity and then used the right one again.

Open
#187 0 comments 0 reactions 1 assignee Assigned to @Arvindthiru View on GitHub
bug
Dominant language
Go
Stars
226
Forks
44
Avg merge
11h 7m
Merged PRs (30d)
5

Description

Changed membercluster to use the wrong identity at 18:51, and changed membercluster to use the correct identity at 19:03

k logs hub-agent-579b5f9868-x45xh -n fleet-system
I0720 18:51:29.000566 1 membercluster_controller.go:265] "the role binding is different from what is expected, updating" roleBinding="fleet-rolebinding-membercluster-sample" memberCluster="membercluster-sample"
I0720 19:03:03.034474 1 membercluster_controller.go:265] "the role binding is different from what is expected, updating" roleBinding="fleet-rolebinding-membercluster-sample" memberCluster="membercluster-sample"

k logs member-agent-578f5654dd-hqhpl member-agent -n fleet-system
E0720 19:02:54.874560 1 member_controller.go:152] "failed to update internal member cluster status" err="internalmemberclusters.fleet.azure.com \"membercluster-sample\" is forbidden: User \"d9757858-807b-44f9-95ed-1dffe891fa95\" cannot update resource \"internalmemberclusters/status\" in API group \"fleet.azure.com\" in the namespace \"fleet-member-membercluster-sample\": User does not have access to the resource in Azure. Update role assignment to allow access." InternalMemberCluster="fleet-member-membercluster-sample/membercluster-sample"
E0720 19:02:55.221390 1 member_controller.go:152] "failed to update internal member cluster status" err="internalmemberclusters.fleet.azure.com \"membercluster-sample\" is forbidden: User \"d9757858-807b-44f9-95ed-1dffe891fa95\" cannot update resource \"internalmemberclusters/status\" in API group \"fleet.azure.com\" in the namespace \"fleet-member-membercluster-sample\": User does not have access to the resource in Azure. Update role assignment to allow access." InternalMemberCluster="fleet-member-membercluster-sample/membercluster-sample"
E0720 19:02:55.221453 1 member_controller.go:80] "reconcile failed" err="failed to set internal member cluster heartbeat for fleet-member-membercluster-sample/membercluster-sample: internalmemberclusters.fleet.azure.com \"membercluster-sample\" is forbidden: User \"d9757858-807b-44f9-95ed-1dffe891fa95\" cannot update resource \"internalmemberclusters/status\" in API group \"fleet.azure.com\" in the namespace \"fleet-member-membercluster-sample\": User does not have access to the resource in Azure. Update role assignment to allow access."
I0720 19:03:17.737445 1 reflector.go:255] Listing and watching *v1alpha1.InternalMemberCluster from pkg/mod/k8s.io/client-go@v0.23.0/tools/cache/reflector.go:167

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.