operator-sdk: bundle validate - service account name cannot match service account defined for deployment spec in CSV

Bug Report

What did you do?

When running operator-sdk bundle validate ./bundle or by using the Makefile make bundle the validation fails when having a service account defined which needs to exist in order to run a deployment.

Our setup consists of the deployment for the Operator itself and an additional deployment for a mutating webhook. Since the webhook needs a separate service account for running properly we create it in our manifests and reference it for the kustiomization files.

When having that SA defined in the manifests and using it in the deployment the bundle validation fails with the following error msg: ERRO[0000] Error: Value <service_account_name>: invalid service account found in bundle. sa name cannot match service account defined for deployment spec in CSV

Environment

Operator type:

/language go

operator-sdk version: “v1.12.0”, commit: “d3b2761afdb78f629a7eaf4461b0fb8ae3b02860”, kubernetes version: “v1.21”, go version: “go1.17”,

Additional context

Example repo here: https://github.com/Dynatrace/dynatrace-oneagent-operator

About this issue

Original URL
State: closed
Created 3 years ago
Comments: 18 (10 by maintainers)

Commits related to this issue

bundle: fix validation error via removing SA manifest Fix: "Error: Value odf-operator-controller-manager: invalid service account found in bundle. sa name cannot match service account defined for dep... — committed to iamniting/odf-operator by iamniting 3 years ago
bundle: fix validation error via removing SA manifest Fix: "Error: Value odf-operator-controller-manager: invalid service account found in bundle. sa name cannot match service account defined for dep... — committed to openshift-cherrypick-robot/odf-operator by iamniting 3 years ago
Remove serviceaccount manifest to fix operator-framework/operator-sdk#5244 — committed to ekaulberg/certified-operators by ekaulberg 3 years ago
Changes for v1.14.0 - in local repo remove file bundle/manifests/ocs-osd*serviceaccount.yaml - ref https://github.com/operator-framework/operator-sdk/issues/5244#issuecomment-950917221 Signed-off-by... — committed to leelavg/ocs-osd-deployer by leelavg 2 years ago
Changes for v1.14.0 - in local repo remove file bundle/manifests/ocs-osd*serviceaccount.yaml - ref https://github.com/operator-framework/operator-sdk/issues/5244#issuecomment-950917221 Signed-off-by... — committed to leelavg/ocs-osd-deployer by leelavg 2 years ago
Changes for v1.14.0 - in local repo remove file bundle/manifests/ocs-osd*serviceaccount.yaml - ref https://github.com/operator-framework/operator-sdk/issues/5244#issuecomment-950917221 Signed-off-by... — committed to leelavg/ocs-osd-deployer by leelavg 2 years ago
Changes for v1.14.0 - in local repo remove file bundle/manifests/ocs-osd*serviceaccount.yaml - ref https://github.com/operator-framework/operator-sdk/issues/5244#issuecomment-950917221 Signed-off-by... — committed to leelavg/ocs-osd-deployer by leelavg 2 years ago
Changes for v1.14.0 - in local repo remove file bundle/manifests/ocs-osd*serviceaccount.yaml - ref https://github.com/operator-framework/operator-sdk/issues/5244#issuecomment-950917221 Signed-off-by... — committed to leelavg/ocs-osd-deployer by leelavg 2 years ago
Changes for v1.14.0 - in local repo remove file bundle/manifests/ocs-osd*serviceaccount.yaml - ref https://github.com/operator-framework/operator-sdk/issues/5244#issuecomment-950917221 Signed-off-by... — committed to red-hat-storage/ocs-osd-deployer by leelavg 2 years ago

Most upvoted comments

The issue still does not seem to be fixed

https://github.com/open-telemetry/opentelemetry-operator/pull/450

~/projects/opentelemetry/opentelemetry-operator(bump-operator-sdk*) » operator-sdk version                                                                                                                                                                                                                                         1 ↵ ploffay@fedora
operator-sdk version: "v1.13.1", commit: "1659ab58a073999463e6dcdf18bdc359a315e091", kubernetes version: "1.21", go version: "go1.16.8", GOOS: "linux", GOARCH: "amd64"
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
~/projects/opentelemetry/opentelemetry-operator(bump-operator-sdk*) » operator-sdk bundle validate ./bundle                                                                                                                                                                                                                            ploffay@fedora
ERRO[0000] Error: Value opentelemetry-operator-controller-manager: invalid service account found in bundle. sa name cannot match service account defined for deployment spec in CSV 
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
~/projects/opentelemetry/opentelemetry-operator(bump-operator-sdk*) »t spec in CSV 
make: *** [Makefile:219: bundle] Error 1

pavolloffay on Oct 18, 2021

It seems solved in : https://github.com/operator-framework/operator-sdk/pull/5282 And should be pushed in the next release. I think we will create a patch one 1.13.1. c/c @jmrodri

camilamacedo86 on Oct 11, 2021

The release with this fix is available now: https://github.com/operator-framework/operator-sdk/releases/tag/v1.13.1

camilamacedo86 on Oct 12, 2021

Hi @DTMad,

See that the error is just to test the bundle. So, if you need to build the bundle and want to try to move forward without the test you can comment on the line: https://github.com/operator-framework/operator-sdk/blob/master/testdata/go/v3/memcached-operator/Makefile#L154. OR you can use an old version of SDK as well.

camilamacedo86 on Oct 11, 2021