Project stuck in Terminating state is blocking RBAC reconcile for OpenShift Pipelines Operator

Solution Verified - Updated -

Issue

  • After the upgrade from Pipelines 1.5 to 1.7, certain namespaces missing the required RBAC permissions to run pipelines.
  • After upgarding Tekton from 1.5 to 1.7 the Operator is reporting the below error and RBAC reconcile in other namespaces is not happening as expected.

    2022-06-23T06:44:10.310287698Z {"level":"error","logger":"tekton-operator","caller":"tektonconfig/reconciler.go:294","msg":"Returned an error","commit":"339cf5f","knative.dev/pod":"openshift-pipelines-operator-69d5655558-w629h",        "knative.dev/controller":"github.com.tektoncd.operator.pkg.reconciler.shared.tektonconfig.Reconciler","knative.dev/kind":"operator.tekton.dev.TektonConfig","knative.dev/traceid":"d0de0f76-4495-440a-81b0-a46bc0837aec",        "knative.dev/key":"config","targetMethod":"ReconcileKind","error":"configmaps \"config-trusted-cabundle\" is forbidden: unable to create new content in namespace namespace-example because it is being terminated",        "stacktrace":"github.com/tektoncd/operator/pkg/client/injection/reconciler/operator/v1alpha1/tektonconfig.(*reconcilerImpl).Reconcile\n\t        /opt/app-root/src/go/src/github.com/tektoncd/operator/pkg/client/injection/reconciler/operator/v1alpha1/tektonconfig/reconciler.go:294\nknative.dev/pkg/controller.(*Impl).processNextWorkItem\n\t        /opt/app-root/src/go/src/github.com/tektoncd/operator/vendor/knative.dev/pkg/controller/controller.go:542\nknative.dev/pkg/controller.(*Impl).RunContext.func3\n\t/opt/app-root/src/go/src/github.com/tektoncd/operator/vendor/knative.dev/pkg/controller/controller.go:478"}
    

Environment

  • Red Hat OpenShift Pipelines 1.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content