Bug_API_Lease_lock_strimzi-cluster-operator

[amitmiglani91]

Hi,
i am upgrading strimzi from 0.28 to 0.32 while updateting, strimzi & kafka all pods are running but in Strimzi operator logs getting this error:-
can you please tell me is this belongs CRTS need to updated too? or which services strimzi is saying, i am using AKS cluster.

ERROR LeaderElector:156 - Exception occurred while acquiring lock 'LeaseLock: strimzi - strimzi-cluster-operator (strimzi-cluster-operator-669cc96576-k5sdx)'
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: (https)://0.0.0.0/apis/coordination.k8s.io/v1/namespaces/strimzi/leases/strimzi-cluster-operator. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. leases.coordination.k8s.io "strimzi-cluster-operator" is forbidden: User "system:serviceaccount:strimzi:strimzi-cluster-operator" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "My-namspace".
at io.fabric8.kubernetes.client.KubernetesClientException.copyAsCause(KubernetesClientException.java:238) ~[io.fabric8.kubernetes-client-api-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.OperationSupport.waitForResult(OperationSupport.java:517) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.OperationSupport.handleResponse(OperationSupport.java:551) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.OperationSupport.handleGet(OperationSupport.java:463) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.BaseOperation.handleGet(BaseOperation.java:713) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.BaseOperation.getMandatory(BaseOperation.java:172) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.BaseOperation.get(BaseOperation.java:139) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.dsl.internal.BaseOperation.get(BaseOperation.java:88) ~[io.fabric8.kubernetes-client-6.2.0.jar:?]
at io.fabric8.kubernetes.client.extended.leaderelection.resourcelock.LeaseLock.get(LeaseLock.java:44) ~[io.fabric8.kubernetes-client-api-6.2.0.jar:?]
at io.fabric8.kubernetes.client.extended.leaderelection.LeaderElector.tryAcquireOrRenew(LeaderElector.java:188) ~[io.fabric8.kubernetes-client-api-6.2.0.jar:?]
at io.fabric8.kubernetes.client.extended.leaderelection.LeaderElector.lambda$acquire$4(LeaderElector.java:151) ~[io.fabric8.kubernetes-client-api-6.2.0.jar:?]
at io.fabric8.kubernetes.client.extended.leaderelection.LeaderElector.lambda$loop$8(LeaderElector.java:253) ~[io.fabric8.kubernetes-client-api-6.2.0.jar:?]
at java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1736) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~[?:?]

[scholzj]

Sounds like you did not properly updates the RBAC rights? How did you do the upgrade?

[amitmiglani91]

No I didnt do that, :( can you please tell me how to do.That Would e really helpfull

[scholzj]

I cannot tell you how to do it because I do not know anything about your environment. That is why I asked you how did you do the upgrade. But all the resources are changing between the releases. So with every upgrade, you have to update the CRDs, the RBAC files etc.