Skip to content

Runner update fails on vanilla k8s

Setup: k8s, olm, operator from operatorhub

After updating operator from 1.39 to 1.41, it fails to update runner with error:

apiVersion: apps.gitlab.com/v1beta2
kind: Runner
metadata:
  name: dev-k8s
  namespace: gitlab-runner
spec:
  buildImage: alpine/k8s:1.34.0
  concurrent: 100
  config: docker-runner-config
  gitlabUrl: http://gitlab-webservice-default.gitlab.svc:8181
  token: gitlab-k8s-runner-secret
status:
  message: >-
    roles.rbac.authorization.k8s.io "gitlab-runner-app-role" is forbidden: user
    "system:serviceaccount:gitlab:gitlab-runner-sa"
    (groups=["system:serviceaccounts" "system:serviceaccounts:gitlab"
    "system:authenticated"]) is attempting to grant RBAC permissions not
    currently held:

    {APIGroups:["security.openshift.io"],
    Resources:["securitycontextconstraints"], ResourceNames:["anyuid"],
    Verbs:["use"]}
  phase: Running
  registration: is valid
Edited by Alexander Cenness