Dell Container Storage Modules Authorization Install Fails When Specifying a Custom Namespace

Summary: Operator installation of Dell Container Storage Modules Authorization (v1.9) fails when specifying a custom namespace.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

Authorization - Proxy-server logs
kube-mgmt E0320 15:30:04.001388       1 reflector.go:126] github.com/open-policy-agent/kube-mgmt/pkg/configmap/configmap.go:160: Failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:dell-csm-authorization:default" cannot list resource "configmaps" in API group "" in the namespace "authorization"

Dell Container Storage Modules Authorization policies on the proxy-server deployment are configured for the Authorization namespace.
# oc get deploy proxy-server -n authorization -o yaml | grep policies
        - --policies=authorization
#

Cause

The operator method of installing is coded to use the "authorization" namespace, irrespective of the custom namespace specified during install.

Resolution

Dell engineering is evaluating the requirements to address this issue in an upcoming Dell Container Storage Modules product release.

Affected Products

Container Storage Modules Family, Container Storage Modules
Article Properties
Article Number: 000223496
Article Type: Solution
Last Modified: 09 May 2024
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.