<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div dir="ltr">
<div>Hi Ian,</div>
<div> Thanks for your reporting. This issue was fixed at Beta 5.</div>
<div><br>
</div>
<div>JenTing</div>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">Donaldson, Ian <<a href="mailto:Ian.Donaldson@ngic.com">Ian.Donaldson@ngic.com</a>> 於 2019年8月7日 週三 下午10:55寫道：<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-4246822491648672031WordSection1">
<p class="MsoNormal">Seeing a lot of these failure to rotate keys, due to forbidden status.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">2019-08-07T14:52:25.529575+00:00 caasp-test-worker-02 k8s.pod/kube-system/oidc-dex-55fc689dc-vtvnh/oidc-dex 2019-08-07T10:52:25.529490058-04:00 stderr F time="2019-08-07T14:52:25Z" level=error msg="failed to rotate keys: PUT
<a href="https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/kube-system/signingkeies/openid-connect-keys" target="_blank">
https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/kube-system/signingkeies/openid-connect-keys</a> Forbidden: response from server \"{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"<a href="http://signingkeies.dex.coreos.com" target="_blank">signingkeies.dex.coreos.com</a>
\\"openid-connect-keys\\" is forbidden: User \\"system:serviceaccount:kube-system:oidc-dex\\" cannot update resource \\"signingkeies\\" in API group \\"<a href="http://dex.coreos.com" target="_blank">dex.coreos.com</a>\\" in the namespace
<a>\\"kube-system\\"\",\"reason\":\"Forbidden\",\"details\":{\"name\":\"openid-connect-keys\",\"group\":\"dex.coreos.com\",\"kind\":\"signingkeies\"},\"code\":403}\</a>""<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
<p class="MsoNormal"><br>
Ian<u></u><u></u></p>
</div>
<hr>
Note: Please be aware that unencrypted electronic mail is not secure. For this reason, please do not send any sensitive personal information such
<br>
as your address, driver license, policy number, Social Security Number, or claims information by unencrypted electronic mail. The information
<br>
contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient,
<br>
or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution
<br>
or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying
<br>
to the message and deleting it from your computer. Thank you.<br>
</div>
_______________________________________________<br>
caasp-beta mailing list<br>
<a href="mailto:caasp-beta@lists.suse.com" target="_blank">caasp-beta@lists.suse.com</a><br>
Check the mailing list archives or Unsubscribe at <a href="http://lists.suse.com/mailman/listinfo/caasp-beta" rel="noreferrer" target="_blank">
http://lists.suse.com/mailman/listinfo/caasp-beta</a><br>
</blockquote>
</div>
</div>
</body>
</html>