Test-infra: k8s-infra-gcr-vuln-dashboard service account not found

Created on 23 Sep 2020 · 7Comments · Source: kubernetes/test-infra

jsonPayload: {
  component: "prow-controller-manager"   
  error: "pods "15ff72de-fdc0-11ea-bf6c-a2eeca28ab84" is forbidden: error looking up service account test-pods/k8s-infra-gcr-vuln-dashboard: serviceaccount "k8s-infra-gcr-vuln-dashboard" not found"   
  file: "prow/plank/reconciler.go:468"   
  func: "k8s.io/test-infra/prow/plank.(*reconciler).syncTriggeredJob"   
  job: "ci-k8sio-vuln-dashboard-update"   
  level: "warning"   
  msg: "Unprocessable pod."   
 }

kinbug kinoncall-hotlist

Source

chases2

Most helpful comment

Also ref: https://github.com/kubernetes-sigs/k8s-container-image-promoter/issues/266#issuecomment-710162069

spiffxp on 16 Oct 2020

👍3

All 7 comments

/assign yodahekinsew
This error appears to be caused by the job added in this PR: https://github.com/kubernetes/test-infra/pull/19003

cjwagner on 9 Oct 2020

@cjwagner: GitHub didn't allow me to assign the following users: yodahekinsew.

Note that only kubernetes members, repo collaborators and people who have commented on this issue/PR can be assigned. Additionally, issues/PRs can only have 10 assignees at the same time.
For more information please see the contributor guide

In response to this:

/assign yodahekinsew
This error appears to be caused by the job added in this PR: https://github.com/kubernetes/test-infra/pull/19003

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

k8s-ci-robot on 9 Oct 2020

This is still an issue.
/assign @justaugustus @listx

cjwagner on 13 Oct 2020

I would recommend moving this job over to k8s-infra-prow-build-trusted (which has this account, ref: https://github.com/kubernetes/k8s.io/blob/master/infra/gcp/clusters/projects/k8s-infra-prow-build-trusted/prow-build-trusted/resources/build-serviceaccounts.yaml#L50-L56)

The job would need to live here https://github.com/kubernetes/test-infra/blob/master/config/jobs/kubernetes/wg-k8s-infra/trusted/wg-k8s-infra-trusted.yaml

spiffxp on 16 Oct 2020

👍2

Also ref: https://github.com/kubernetes-sigs/k8s-container-image-promoter/issues/266#issuecomment-710162069

spiffxp on 16 Oct 2020

👍3

Carlos, please work on this as part of https://github.com/kubernetes-sigs/k8s-container-image-promoter/issues/269.

/assign @cpanato
/unassign