From 21acb8dc9afbc3c1b2a786c4041213fa7e8761dc Mon Sep 17 00:00:00 2001 From: Diogo Guerra Date: Wed, 20 Mar 2019 14:25:07 +0100 Subject: [PATCH] Fix openstack-cloud-controller-manager restarts Openstack-cloud-controller-manager restarts several times during cluster creation. This happens because cloud-controller-manager starts running before needed secrets exist in kubernetes. Cloud-controller-manager lists secrets and if the secrets exists it uses it and moves on, but if the secret doesn't exist it starts a watch until it does. As this is not allowed the pod fails. This is triggered by Issue https://github.com/kubernetes/cloud-provider-openstack/issues/545 Story: 2005270 Change-Id: If8f34dc45b3b8a76e3d561ed41b4d0a783ceecb5 Signed-off-by: Diogo Guerra --- .../kubernetes/fragments/kube-apiserver-to-kubelet-role.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/magnum/drivers/common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh b/magnum/drivers/common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh index 79eb7bab7c..7383bbe019 100644 --- a/magnum/drivers/common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh +++ b/magnum/drivers/common/templates/kubernetes/fragments/kube-apiserver-to-kubelet-role.sh @@ -179,6 +179,7 @@ items: verbs: - list - get + - watch - apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: