Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: authorization.azure.upbound.io/v1beta1 RoleAssignment reports ready while it's still not usable #876

Open
1 task done
drew0ps opened this issue Nov 18, 2024 · 0 comments
Labels
bug Something isn't working needs:triage

Comments

@drew0ps
Copy link
Contributor

drew0ps commented Nov 18, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Affected Resource(s)

authorization.azure.upbound.io/v1beta1 - RoleAssignment

Resource MRs required to reproduce the bug

No response

Steps to Reproduce

  • Install a RoleAssignment
  • Install a resource where a role assignment is a dependency, for example the BackupInstanceKubernetesCluster where a Blob Contributor role assignment is a dependency
  • Observe the azure error message: Please refer to the extension installation documentation to assign the required permissions to the extension MSI on the backup or staging storage account. If permissions have already been assigned, please wait for some time before retrying since the role propagation can take a while. For more information, refer to https://aka.ms/aksclusterbackup"
  • Try to install the backupinstancekubernetescluster resource again and notice that now it works.

What happened?

Role assignment reports ready while its still not usable. The grace time should be higher. For now the only option is to write a condition depending on the nop provider to provide enough time for azure to propagate the access.

Relevant Error Output Snippet

No response

Crossplane Version

1.18

Provider Version

1.8.0

Kubernetes Version

No response

Kubernetes Distribution

No response

Additional Info

No response

@drew0ps drew0ps added bug Something isn't working needs:triage labels Nov 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working needs:triage
Projects
None yet
Development

No branches or pull requests

1 participant