Juju won't create service account if role binding already exists
Bug #1845696 reported by
Kenneth Koski
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Juju |
Fix Released
|
High
|
Yang Kelvin Liu |
Bug Description
I'm attempting to create several service accounts, and they're failing with this error message:
creating or updating service account: role binding "argo-ui-argo-ui" already exists
Running `microk8s.kubectl get rolebindings -A` shows me that it exists:
kubeflow argo-ui-argo-ui 61s
I believe that this role binding was created by Juju as part of creating that service account, as opposed to erroring on finding a rolebinding that was manually created before deployment, so the bug seems to be that Juju creates it and then is surprised to see that it exists.
Changed in juju: | |
milestone: | none → 2.7-beta1 |
importance: | Undecided → High |
status: | New → Triaged |
assignee: | nobody → Yang Kelvin Liu (kelvin.liu) |
Changed in juju: | |
status: | Triaged → In Progress |
status: | In Progress → Fix Committed |
Changed in juju: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
It looks like this error message is somewhat misleading, and actually covering up another issue. I wasn't using pod spec v2 correctly, and the CRDs for each service were not getting created, which was causing the workload pods to get constantly rebooted.
However, now that I've created the CRDs manually, I'm still seeing an issue. "juju status" will show a service as active and ready, and then eventually go to the `creating or updating service account: role binding "FOO" already exists` error, and then cycle back to active and ready. The rolebindings appear to be getting constantly deleted and recreated, though I'm not sure what the timings are relative to the error message that I'm getting. An example rolebinding:
Name: pipelines- api-pipeline- runner pipelines- api
juju-model= kubeflow
Labels: juju-app=
Annotations: <none>
Role:
Kind: ClusterRole
Name: pipeline-runner
Subjects:
Kind Name Namespace
---- ---- ---------
ServiceAccount pipelines-api kubeflow