Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-60369

Kubernetes plugin is trying to create PVC when there are no volumes specified

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Critical Critical
    • kubernetes-plugin
    • None
    • kubernetes-plugin: 1.19.3
      jenkins: 2.176.2
      kuberentes: 1.13 AWS EKS

      There are no volumes specified in our Pod template.
      Even though, Jenkins is trying to create a PVC and fails with an access denied error.

      /var/log/jenkins/jenkins.log

      io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: POST at: https://1293c2340bb6c04946f7328ce8ca2ad7.sk1.us-east-1.eks.amazonaws.com
      /api/v1/namespaces/ci/persistentvolumeclaims. Message: Forbidden! User kube-aws-translator-admin doesn't have permission. persistentvolumeclaims is forbidde
      n: User "system:serviceaccount:ci:jenkins" cannot create resource "persistentvolumeclaims" in API group "" in the namespace "ci".
              at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:510)
              at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:447)
              at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:413)
              at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:372)
              at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleCreate(OperationSupport.java:241)
              at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleCreate(BaseOperation.java:819)
              at io.fabric8.kubernetes.client.dsl.base.BaseOperation.create(BaseOperation.java:334)
              at io.fabric8.kubernetes.client.dsl.base.BaseOperation.create(BaseOperation.java:330)
              at org.csanchez.jenkins.plugins.kubernetes.volumes.workspace.DynamicPVCWorkspaceVolume.createVolume(DynamicPVCWorkspaceVolume.java:94)
              at org.csanchez.jenkins.plugins.kubernetes.KubernetesLauncher.launch(KubernetesLauncher.java:130)
              at hudson.slaves.SlaveComputer$1.call(SlaveComputer.java:294)
              at jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46)
              at jenkins.security.ImpersonatingExecutorService$2.call(ImpersonatingExecutorService.java:71)
              at java.util.concurrent.FutureTask.run(FutureTask.java:266)
              at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
              at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
              at java.lang.Thread.run(Thread.java:748)
      

       

       

            Unassigned Unassigned
            vladimir_mukhin Vladimir Mukhin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: