Runner update fails on vanilla k8s
Setup: k8s, olm, operator from operatorhub
After updating operator from 1.39 to 1.41, it fails to update runner with error:
apiVersion: apps.gitlab.com/v1beta2
kind: Runner
metadata:
name: dev-k8s
namespace: gitlab-runner
spec:
buildImage: alpine/k8s:1.34.0
concurrent: 100
config: docker-runner-config
gitlabUrl: http://gitlab-webservice-default.gitlab.svc:8181
token: gitlab-k8s-runner-secret
status:
message: >-
roles.rbac.authorization.k8s.io "gitlab-runner-app-role" is forbidden: user
"system:serviceaccount:gitlab:gitlab-runner-sa"
(groups=["system:serviceaccounts" "system:serviceaccounts:gitlab"
"system:authenticated"]) is attempting to grant RBAC permissions not
currently held:
{APIGroups:["security.openshift.io"],
Resources:["securitycontextconstraints"], ResourceNames:["anyuid"],
Verbs:["use"]}
phase: Running
registration: is valid
Edited by Alexander Cenness