[ZBX-22292] Zabbix Operator for OpenShift - agent update fails to version 6.0.12 Created: 2023 Feb 02  Updated: 2023 Feb 06  Resolved: 2023 Feb 06

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: None
Affects Version/s: 6.0.12
Fix Version/s: None

Type: Problem report Priority: Trivial
Reporter: Tuomas Tielinen Assignee: Zabbix Support Team
Resolution: Commercial support required Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

OpenShift Operator


Attachments: PNG File image-2023-02-02-16-16-06-362.png     PNG File image-2023-02-02-16-16-53-035.png    

 Description   

When the Operator tries to update the agent to version 6.0.12, it looks like it can't create the needed service account zabbix-agent.

$ oc get events
LAST SEEN   TYPE      REASON         OBJECT                         MESSAGE
2m14s       Warning   FailedMount    pod/zabbix-agent-agent-4wk8g   MountVolume.SetUp failed for volume "kube-api-access-zgwfs" : failed to fetch token: serviceaccounts "zabbix-agent" not found
2m14s       Warning   FailedMount    pod/zabbix-agent-agent-96flw   MountVolume.SetUp failed for volume "kube-api-access-8k4gd" : failed to fetch token: serviceaccounts "zabbix-agent" not found
3m9s        Warning   FailedMount    pod/zabbix-agent-agent-9bvft   MountVolume.SetUp failed for volume "kube-api-access-krvzb" : failed to fetch token: serviceaccounts "zabbix-agent" not found
35s         Warning   FailedMount    pod/zabbix-agent-agent-bbnwt   MountVolume.SetUp failed for volume "kube-api-access-zvzpc" : failed to fetch token: serviceaccounts "zabbix-agent" not found
2m14s       Warning   FailedMount    pod/zabbix-agent-agent-klkbf   MountVolume.SetUp failed for volume "kube-api-access-vbgkx" : failed to fetch token: serviceaccounts "zabbix-agent" not found
105s        Warning   FailedMount    pod/zabbix-agent-agent-qsbg5   MountVolume.SetUp failed for volume "kube-api-access-cznpq" : failed to fetch token: serviceaccounts "zabbix-agent" not found
4m1s        Warning   FailedMount    pod/zabbix-agent-agent-xljhm   MountVolume.SetUp failed for volume "kube-api-access-dnhrb" : failed to fetch token: serviceaccounts "zabbix-agent" not found
4m38s       Warning   FailedCreate   daemonset/zabbix-agent         Error creating: pods "zabbix-agent-" is forbidden: error looking up service account zabbix/zabbix-agent: serviceaccount "zabbix-agent" not found 

According to the install plan, the service account is present.

But when I click that link, it's not found.

Relates to this ticket: https://support.zabbix.com/browse/ZBX-21924



 Comments   
Comment by Alexey Pustovalov [ 2023 Feb 03 ]

actually this part is not changed at all. what do you see in status section of the operator's yaml? most interesting "dependencies" information.

Comment by Tuomas Tielinen [ 2023 Feb 03 ]

This is the operator's status section.

status:
  cleanup: {}
  conditions:
    - lastTransitionTime: '2023-01-27T16:42:19Z'
      lastUpdateTime: '2023-01-27T16:42:19Z'
      message: requirements not yet checked
      phase: Pending
      reason: RequirementsUnknown
    - lastTransitionTime: '2023-01-27T16:42:19Z'
      lastUpdateTime: '2023-01-27T16:42:19Z'
      message: one or more requirements couldn't be found
      phase: Pending
      reason: RequirementsNotMet
    - lastTransitionTime: '2023-01-27T16:42:21Z'
      lastUpdateTime: '2023-01-27T16:42:21Z'
      message: 'all requirements found, attempting install'
      phase: InstallReady
      reason: AllRequirementsMet
    - lastTransitionTime: '2023-01-27T16:42:22Z'
      lastUpdateTime: '2023-01-27T16:42:22Z'
      message: waiting for install components to report healthy
      phase: Installing
      reason: InstallSucceeded
    - lastTransitionTime: '2023-01-27T16:42:22Z'
      lastUpdateTime: '2023-01-27T16:42:23Z'
      message: >-
        installing: waiting for deployment zabbix-operator-manager to become
        ready: deployment "zabbix-operator-manager" not available: Deployment
        does not have minimum availability.
      phase: Installing
      reason: InstallWaiting
    - lastTransitionTime: '2023-01-27T16:42:43Z'
      lastUpdateTime: '2023-01-27T16:42:43Z'
      message: install strategy completed with no errors
      phase: Succeeded
      reason: InstallSucceeded
  lastTransitionTime: '2023-01-27T16:42:43Z'
  lastUpdateTime: '2023-01-27T16:42:43Z'
  message: install strategy completed with no errors
  phase: Succeeded
  reason: InstallSucceeded
  requirementStatus:
    - group: operators.coreos.com
      kind: ClusterServiceVersion
      message: CSV minKubeVersion (1.19.0) less than server version (v1.23.12+8a6bfe4)
      name: zabbix-operator-certified.v6.0.12
      status: Present
      version: v1alpha1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is present and Established condition is true
      name: zabbixagent2s.kubernetes.zabbix.com
      status: Present
      uuid: 0b6be6b3-1594-4aa1-9bb1-73ffaed25fbf
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is present and Established condition is true
      name: zabbixagents.kubernetes.zabbix.com
      status: Present
      uuid: 0995c767-99bd-4cb1-b555-2fc22d659e4d
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is present and Established condition is true
      name: zabbixfulls.kubernetes.zabbix.com
      status: Present
      uuid: 5d000ff3-b782-4a64-b797-3ed71f905d48
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is present and Established condition is true
      name: zabbixproxymysqls.kubernetes.zabbix.com
      status: Present
      uuid: e0fea400-80aa-47e7-aa0b-c5ff45d674cc
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is present and Established condition is true
      name: zabbixproxysqlites.kubernetes.zabbix.com
      status: Present
      uuid: 4f38c385-c35c-4c34-8c21-29aec1cd1269
      version: v1
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
      message: CRD is present and Established condition is true
      name: zabbixservers.kubernetes.zabbix.com
      status: Present
      uuid: 8faa4580-cd66-40f2-b6e0-ae9fafce02da
      version: v1
    - dependents:
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["get","list","watch","create","update","patch","delete"],"apiGroups":[""],"resources":["configmaps"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["get","list","watch","create","update","patch","delete"],"apiGroups":["coordination.k8s.io"],"resources":["leases"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","patch"],"apiGroups":[""],"resources":["events"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":[""],"resources":["secrets","pods","pods/exec","pods/log"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["apps"],"resources":["deployments","daemonsets","replicasets","statefulsets"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["get","list","create","delete","patch","update","watch"],"apiGroups":[""],"resources":["services"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["get","list","create","delete","patch","update","watch"],"apiGroups":["batch"],"resources":["cronjobs"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["get","create","list","patch","watch"],"apiGroups":["route.openshift.io"],"resources":["routes"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixagents","zabbixagents/status","zabbixagents/finalizers"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixagent2s","zabbixagent2s/status","zabbixagent2s/finalizers"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixfulls","zabbixfulls/status","zabbixfulls/finalizers"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixproxymysqls","zabbixproxymysqls/status","zabbixproxymysqls/finalizers"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixproxysqlites","zabbixproxysqlites/status","zabbixproxysqlites/finalizers"]}
          status: Satisfied
          version: v1
        - group: rbac.authorization.k8s.io
          kind: PolicyRule
          message: >-
            namespaced
            rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixservers","zabbixservers/status","zabbixservers/finalizers"]}
          status: Satisfied
          version: v1
      group: ''
      kind: ServiceAccount
      message: ''
      name: zabbix-operator-manager
      status: Present
      version: v1 
Comment by Tuomas Tielinen [ 2023 Feb 03 ]

I have installed the Operator using the marketplace, following this blog post. I noticed there is a newer blog post that uses Helm.

Comment by Dmitrijs Lamberts [ 2023 Feb 06 ]

Please be advised that this section of the tracker is for bug reports only. The case you have submitted can not be qualified as one, so please reach out to [email protected] for commercial support (https://zabbix.com/support) or consultancy services. Alternatively, you can also use our IRC channel or community forum (https://www.zabbix.com/forum) for assistance. With that said, we are closing this ticket. Thank you for understanding.

Generated at Sat May 31 03:15:02 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.