[ZBX-22292] Zabbix Operator for OpenShift - agent update fails to version 6.0.12 Created: 2023 Feb 02 Updated: 2023 Feb 06 Resolved: 2023 Feb 06 |
|
Status: | Closed |
Project: | ZABBIX BUGS AND ISSUES |
Component/s: | None |
Affects Version/s: | 6.0.12 |
Fix Version/s: | None |
Type: | Problem report | Priority: | Trivial |
Reporter: | Tuomas Tielinen | Assignee: | Zabbix Support Team |
Resolution: | Commercial support required | Votes: | 0 |
Labels: | None | ||
Remaining Estimate: | Not Specified | ||
Time Spent: | Not Specified | ||
Original Estimate: | Not Specified | ||
Environment: |
OpenShift Operator |
Attachments: |
![]() ![]() |
Description |
When the Operator tries to update the agent to version 6.0.12, it looks like it can't create the needed service account zabbix-agent. $ oc get events LAST SEEN TYPE REASON OBJECT MESSAGE 2m14s Warning FailedMount pod/zabbix-agent-agent-4wk8g MountVolume.SetUp failed for volume "kube-api-access-zgwfs" : failed to fetch token: serviceaccounts "zabbix-agent" not found 2m14s Warning FailedMount pod/zabbix-agent-agent-96flw MountVolume.SetUp failed for volume "kube-api-access-8k4gd" : failed to fetch token: serviceaccounts "zabbix-agent" not found 3m9s Warning FailedMount pod/zabbix-agent-agent-9bvft MountVolume.SetUp failed for volume "kube-api-access-krvzb" : failed to fetch token: serviceaccounts "zabbix-agent" not found 35s Warning FailedMount pod/zabbix-agent-agent-bbnwt MountVolume.SetUp failed for volume "kube-api-access-zvzpc" : failed to fetch token: serviceaccounts "zabbix-agent" not found 2m14s Warning FailedMount pod/zabbix-agent-agent-klkbf MountVolume.SetUp failed for volume "kube-api-access-vbgkx" : failed to fetch token: serviceaccounts "zabbix-agent" not found 105s Warning FailedMount pod/zabbix-agent-agent-qsbg5 MountVolume.SetUp failed for volume "kube-api-access-cznpq" : failed to fetch token: serviceaccounts "zabbix-agent" not found 4m1s Warning FailedMount pod/zabbix-agent-agent-xljhm MountVolume.SetUp failed for volume "kube-api-access-dnhrb" : failed to fetch token: serviceaccounts "zabbix-agent" not found 4m38s Warning FailedCreate daemonset/zabbix-agent Error creating: pods "zabbix-agent-" is forbidden: error looking up service account zabbix/zabbix-agent: serviceaccount "zabbix-agent" not found According to the install plan, the service account is present. But when I click that link, it's not found. Relates to this ticket: https://support.zabbix.com/browse/ZBX-21924 |
Comments |
Comment by Alexey Pustovalov [ 2023 Feb 03 ] |
actually this part is not changed at all. what do you see in status section of the operator's yaml? most interesting "dependencies" information. |
Comment by Tuomas Tielinen [ 2023 Feb 03 ] |
This is the operator's status section. status: cleanup: {} conditions: - lastTransitionTime: '2023-01-27T16:42:19Z' lastUpdateTime: '2023-01-27T16:42:19Z' message: requirements not yet checked phase: Pending reason: RequirementsUnknown - lastTransitionTime: '2023-01-27T16:42:19Z' lastUpdateTime: '2023-01-27T16:42:19Z' message: one or more requirements couldn't be found phase: Pending reason: RequirementsNotMet - lastTransitionTime: '2023-01-27T16:42:21Z' lastUpdateTime: '2023-01-27T16:42:21Z' message: 'all requirements found, attempting install' phase: InstallReady reason: AllRequirementsMet - lastTransitionTime: '2023-01-27T16:42:22Z' lastUpdateTime: '2023-01-27T16:42:22Z' message: waiting for install components to report healthy phase: Installing reason: InstallSucceeded - lastTransitionTime: '2023-01-27T16:42:22Z' lastUpdateTime: '2023-01-27T16:42:23Z' message: >- installing: waiting for deployment zabbix-operator-manager to become ready: deployment "zabbix-operator-manager" not available: Deployment does not have minimum availability. phase: Installing reason: InstallWaiting - lastTransitionTime: '2023-01-27T16:42:43Z' lastUpdateTime: '2023-01-27T16:42:43Z' message: install strategy completed with no errors phase: Succeeded reason: InstallSucceeded lastTransitionTime: '2023-01-27T16:42:43Z' lastUpdateTime: '2023-01-27T16:42:43Z' message: install strategy completed with no errors phase: Succeeded reason: InstallSucceeded requirementStatus: - group: operators.coreos.com kind: ClusterServiceVersion message: CSV minKubeVersion (1.19.0) less than server version (v1.23.12+8a6bfe4) name: zabbix-operator-certified.v6.0.12 status: Present version: v1alpha1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: zabbixagent2s.kubernetes.zabbix.com status: Present uuid: 0b6be6b3-1594-4aa1-9bb1-73ffaed25fbf version: v1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: zabbixagents.kubernetes.zabbix.com status: Present uuid: 0995c767-99bd-4cb1-b555-2fc22d659e4d version: v1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: zabbixfulls.kubernetes.zabbix.com status: Present uuid: 5d000ff3-b782-4a64-b797-3ed71f905d48 version: v1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: zabbixproxymysqls.kubernetes.zabbix.com status: Present uuid: e0fea400-80aa-47e7-aa0b-c5ff45d674cc version: v1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: zabbixproxysqlites.kubernetes.zabbix.com status: Present uuid: 4f38c385-c35c-4c34-8c21-29aec1cd1269 version: v1 - group: apiextensions.k8s.io kind: CustomResourceDefinition message: CRD is present and Established condition is true name: zabbixservers.kubernetes.zabbix.com status: Present uuid: 8faa4580-cd66-40f2-b6e0-ae9fafce02da version: v1 - dependents: - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["get","list","watch","create","update","patch","delete"],"apiGroups":[""],"resources":["configmaps"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["get","list","watch","create","update","patch","delete"],"apiGroups":["coordination.k8s.io"],"resources":["leases"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","patch"],"apiGroups":[""],"resources":["events"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":[""],"resources":["secrets","pods","pods/exec","pods/log"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["apps"],"resources":["deployments","daemonsets","replicasets","statefulsets"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["get","list","create","delete","patch","update","watch"],"apiGroups":[""],"resources":["services"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["get","list","create","delete","patch","update","watch"],"apiGroups":["batch"],"resources":["cronjobs"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["get","create","list","patch","watch"],"apiGroups":["route.openshift.io"],"resources":["routes"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixagents","zabbixagents/status","zabbixagents/finalizers"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixagent2s","zabbixagent2s/status","zabbixagent2s/finalizers"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixfulls","zabbixfulls/status","zabbixfulls/finalizers"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixproxymysqls","zabbixproxymysqls/status","zabbixproxymysqls/finalizers"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixproxysqlites","zabbixproxysqlites/status","zabbixproxysqlites/finalizers"]} status: Satisfied version: v1 - group: rbac.authorization.k8s.io kind: PolicyRule message: >- namespaced rule:{"verbs":["create","delete","get","list","patch","update","watch"],"apiGroups":["kubernetes.zabbix.com"],"resources":["zabbixservers","zabbixservers/status","zabbixservers/finalizers"]} status: Satisfied version: v1 group: '' kind: ServiceAccount message: '' name: zabbix-operator-manager status: Present version: v1 |
Comment by Tuomas Tielinen [ 2023 Feb 03 ] |
I have installed the Operator using the marketplace, following this blog post. I noticed there is a newer blog post that uses Helm. |
Comment by Dmitrijs Lamberts [ 2023 Feb 06 ] |
Please be advised that this section of the tracker is for bug reports only. The case you have submitted can not be qualified as one, so please reach out to [email protected] for commercial support (https://zabbix.com/support) or consultancy services. Alternatively, you can also use our IRC channel or community forum (https://www.zabbix.com/forum) for assistance. With that said, we are closing this ticket. Thank you for understanding. |