Skip to content

Conversation

@Danil-Grigorev
Copy link

Fixing issue with cluster deletion, caused by missing permissions.

2025-03-24T21:56:50.759002Z ERROR reconciling object:reconcile: controller::controllers::controller: error=Finalizer Error: failed to clean up object: Fleet error: BundleNamespaceMapping delete error: ApiError: bundlenamespacemappings.fleet.cattle.io "creategitops-xj4pnq" is forbidden: User "system:serviceaccount:rancher-turtles-system:caapf-controller-manager" cannot delete resource "bundlenamespacemappings" in API group "fleet.cattle.io" in the namespace "creategitops-azure-rke2": Forbidden (ErrorResponse { status: "Failure", message: "bundlenamespacemappings.fleet.cattle.io \"creategitops-xj4pnq\" is forbidden: User \"system:serviceaccount:rancher-turtles-system:caapf-controller-manager\" cannot delete resource \"bundlenamespacemappings\" in API group \"fleet.cattle.io\" in the namespace \"creategitops-azure-rke2\"", reason: "Forbidden", code: 403 }) object.ref=Cluster.v1beta1.cluster.x-k8s.io/cluster-azure-rke2.creategitops-xj4pnq object.reason=error policy requested retry trace_id=00000000000000000000000000000000 name="cluster-azure-rke2" namespace="creategitops-xj4pnq"

- Bump fleet-api-rs to latest

Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>
@Danil-Grigorev Danil-Grigorev added this pull request to the merge queue Mar 25, 2025
Merged via the queue into rancher:main with commit 0809c4e Mar 25, 2025
11 checks passed
@Danil-Grigorev Danil-Grigorev deleted the fix-rbac-delete branch March 25, 2025 07:41
Danil-Grigorev added a commit to Danil-Grigorev/cluster-api-addon-provider-fleet that referenced this pull request Mar 26, 2025
- Bump fleet-api-rs to latest

Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>
Danil-Grigorev added a commit to Danil-Grigorev/cluster-api-addon-provider-fleet that referenced this pull request Mar 26, 2025
- Bump fleet-api-rs to latest

Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>
Danil-Grigorev added a commit that referenced this pull request Mar 26, 2025
* chore(deps): Bump opentelemetry_sdk from 0.28.0 to 0.29.0 (#223)

Bumps [opentelemetry_sdk](https://github.com/open-telemetry/opentelemetry-rust) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry_sdk-0.28.0...opentelemetry_sdk-0.29.0)

---
updated-dependencies:
- dependency-name: opentelemetry_sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>

* chore(deps): Bump opentelemetry-otlp from 0.28.0 to 0.29.0 (#222)

Bumps [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Commits](open-telemetry/opentelemetry-rust@opentelemetry-otlp-0.28.0...opentelemetry-otlp-0.29.0)

---
updated-dependencies:
- dependency-name: opentelemetry-otlp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>

* Add missing RBAC for BundleNamespaceMapping deletion (#226)

- Bump fleet-api-rs to latest

Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>

* Ensure flags update does not upgrade fleet chart (#228)

Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Danil-Grigorev <danil.grigorev@suse.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant