<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi!</p>
<p>Would you mind opening a bug in
<a class="moz-txt-link-freetext" href="https://bugzilla.suse.com/enter_bug.cgi?product=Beta%20SUSE%20CaaS%20Platform%204">https://bugzilla.suse.com/enter_bug.cgi?product=Beta%20SUSE%20CaaS%20Platform%204</a></p>
<p>This will help us fix it.</p>
<p>Thanks in advance</p>
<p>jordi</p>
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 08/07/2019 04:55 PM, Donaldson, Ian
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:159d6275b6ef40b4addc18b4d9d9bde3@WSWPPME001.NGIC.COM">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Seeing a lot of these failure to rotate
keys, due to forbidden status.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2019-08-07T14:52:25.529575+00:00
caasp-test-worker-02
k8s.pod/kube-system/oidc-dex-55fc689dc-vtvnh/oidc-dex
2019-08-07T10:52:25.529490058-04:00 stderr F
time="2019-08-07T14:52:25Z" level=error msg="failed to rotate
keys: PUT
<a class="moz-txt-link-freetext" href="https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/kube-system/signingkeies/openid-connect-keys">https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/kube-system/signingkeies/openid-connect-keys</a>
Forbidden: response from server
\"{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"signingkeies.dex.coreos.com
\\"openid-connect-keys\\" is forbidden: User
\\"system:serviceaccount:kube-system:oidc-dex\\" cannot update
resource \\"signingkeies\\" in API group \\"dex.coreos.com\\"
in the namespace
<a
href="file://%22kube-system/%22/%22,/%22reason/%22:/%22Forbidden/%22,/%22details/%22:%7b/%22name/%22:/%22openid-connect-keys/%22,/%22group/%22:/%22dex.coreos.com/%22,/%22kind/%22:/%22signingkeies/%22%7d,/%22code/%22:403%7d/"
moz-do-not-send="true">
\\"kube-system\\"\",\"reason\":\"Forbidden\",\"details\":{\"name\":\"openid-connect-keys\",\"group\":\"dex.coreos.com\",\"kind\":\"signingkeies\"},\"code\":403}\</a>""<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal"><br>
Ian<o:p></o:p></p>
</div>
<hr>Note: Please be aware that unencrypted electronic mail is not
secure. For this reason, please do not send any sensitive personal
information such <br>
as your address, driver license, policy number, Social Security
Number, or claims information by unencrypted electronic mail. The
information <br>
contained in this message may be privileged and confidential and
protected from disclosure. If the reader of this message is not
the intended recipient, <br>
or an employee or agent responsible for delivering this message to
the intended recipient, you are hereby notified that any
dissemination, distribution <br>
or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify us
immediately by replying <br>
to the message and deleting it from your computer. Thank you.<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
caasp-beta mailing list
<a class="moz-txt-link-abbreviated" href="mailto:caasp-beta@lists.suse.com">caasp-beta@lists.suse.com</a>
Check the mailing list archives or Unsubscribe at <a class="moz-txt-link-freetext" href="http://lists.suse.com/mailman/listinfo/caasp-beta">http://lists.suse.com/mailman/listinfo/caasp-beta</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Jordi Massaguer Pla
Release Manager for SUSE CaaS Platform
SUSE Linux
<a class="moz-txt-link-freetext" href="https://www.suse.com">https://www.suse.com</a></pre>
</body>
</html>