Skip to content

Conversation

@prasadkris
Copy link
Contributor

@prasadkris prasadkris commented Sep 16, 2024

I upgraded our cluster from v1.11.0 to v1.13.0 today (running on self-hosted K8s cluster) and encountered an issue where the upgrade failed to sync the clusters, showing the following error messages. It worked fine after I added the patch permission to the PVCs in the cluster role. I'm submitting a PR to get this merged.

time="2024-09-16T05:42:46Z" level=warning msg="error while syncing cluster state: could not sync persistent volume claims: could not patch annotations of the persistent volume claim for volume \"pgdata-fake-hunting-db-0\": persistentvolumeclaims \"pgdata-fake-hunting-db-0\" is forbidden: User \"system:serviceaccount:postgres-operator:postgres-operator\" cannot patch resource \"persistentvolumeclaims\" in API group \"\" in the namespace \"fake-hunting\"" cluster-name=fake-hunting/fake-hunting-db pkg=cluster
time="2024-09-16T05:42:47Z" level=error msg="could not sync cluster: could not sync persistent volume claims: could not patch annotations of the persistent volume claim for volume \"pgdata-fake-hunting-db-0\": persistentvolumeclaims \"pgdata-fake-hunting-db-0\" is forbidden: User \"system:serviceaccount:postgres-operator:postgres-operator\" cannot patch resource \"persistentvolumeclaims\" in API group \"\" in the namespace \"fake-hunting\"" cluster-name=fake-hunting/fake-hunting-db pkg=controller worker=3
time="2024-09-16T05:42:47Z" level=info msg="received add event for already existing Postgres cluster" cluster-name=fake-hunting/fake-hunting-db pkg=controller worker=3

fixes #2781

@FxKu
Copy link
Member

FxKu commented Sep 18, 2024

oh indeed an oversight by us. Thanks

@FxKu
Copy link
Member

FxKu commented Sep 18, 2024

👍

@FxKu FxKu added this to the 1.14.0 milestone Sep 18, 2024
@fm2022aa
Copy link

fm2022aa commented Oct 9, 2024

image already have

@FxKu FxKu added the bugfix label Oct 16, 2024
@idanovinda
Copy link
Member

👍

1 similar comment
@FxKu
Copy link
Member

FxKu commented Oct 16, 2024

👍

@FxKu FxKu merged commit d21466d into zalando:master Oct 16, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Postgres Operator Cluster Role v1.13 lacks "patch" privilege for PVCs

4 participants