{"action":"closed","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/3254","labels_url":"https://api.github.com/repos/openshift/origin/issues/3254/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/3254/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/3254/events","html_url":"https://github.com/openshift/origin/issues/3254","id":88835880,"number":3254,"title":"fedora+vagrant - deployer pod cannot access secrets","user":{"login":"jlebon","id":11934099,"avatar_url":"https://avatars.githubusercontent.com/u/11934099?v=3","gravatar_id":"","url":"https://api.github.com/users/jlebon","html_url":"https://github.com/jlebon","followers_url":"https://api.github.com/users/jlebon/followers","following_url":"https://api.github.com/users/jlebon/following{/other_user}","gists_url":"https://api.github.com/users/jlebon/gists{/gist_id}","starred_url":"https://api.github.com/users/jlebon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jlebon/subscriptions","organizations_url":"https://api.github.com/users/jlebon/orgs","repos_url":"https://api.github.com/users/jlebon/repos","events_url":"https://api.github.com/users/jlebon/events{/privacy}","received_events_url":"https://api.github.com/users/jlebon/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/component/deployments","name":"component/deployments","color":"0052cc"},{"url":"https://api.github.com/repos/openshift/origin/labels/kind/bug","name":"kind/bug","color":"fc2929"},{"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04"}],"state":"closed","locked":false,"assignee":{"login":"pmorie","id":366488,"avatar_url":"https://avatars.githubusercontent.com/u/366488?v=3","gravatar_id":"","url":"https://api.github.com/users/pmorie","html_url":"https://github.com/pmorie","followers_url":"https://api.github.com/users/pmorie/followers","following_url":"https://api.github.com/users/pmorie/following{/other_user}","gists_url":"https://api.github.com/users/pmorie/gists{/gist_id}","starred_url":"https://api.github.com/users/pmorie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pmorie/subscriptions","organizations_url":"https://api.github.com/users/pmorie/orgs","repos_url":"https://api.github.com/users/pmorie/repos","events_url":"https://api.github.com/users/pmorie/events{/privacy}","received_events_url":"https://api.github.com/users/pmorie/received_events","type":"User","site_admin":false},"milestone":null,"comments":26,"created_at":"2015-06-16T20:43:10Z","updated_at":"2015-09-15T15:06:47Z","closed_at":"2015-09-15T15:06:47Z","body":"Hi all,\r\n\r\n#### Summary\r\nTrying to get a basic router working, but keep getting the following error from the origin-deployer soon after it is started:\r\n\r\n```\r\nF0616 19:19:16.527734       1 deployer.go:64] User \"system:anonymous\" cannot get replicationcontrollers in project \"default\"\r\n```\r\n\r\n#### Steps to reproduce\r\n\r\nListing all the steps here, in case there's something obvious I'm missing from the start, and so that anyone can reproduce it. This is right on top of commit 9aa2388 (`Merge pull request #3224 from smarterclayton/set_cache_control`). I also incorporated some helpful tips obtained while chatting with some folks.\r\n\r\n##### OSO Setup\r\n\r\n- Do `vagrant up` (using the libvirt provider here)\r\n- Once the VM is up and provisioned, `vagrant ssh`\r\n- `sudo yum update -y && sudo yum update docker-io --enablerepo=updates-testing && sudo reboot`\r\n- `uname -r` returns `4.0.4-202.fc21.x86_64`\r\n- `rpm -q docker-io` returns `docker-io-1.6.2-3.gitc3ca5bb.fc21.x86_64`\r\n- Update all the relevant docker images: `sudo docker pull openshift/origin-deployer && sudo docker pull openshift/origin-haproxy-router && sudo docker pull openshift/origin-pod`\r\n- Add `--latest-images` to `openshift` invocation in `/usr/lib/systemd/system/openshift.service` and reload service files with `sudo systemctl daemon-reload`\r\n- `make build`\r\n- `sudo systemctl start openshift`\r\n- As root, `cp /openshift.local.config/master/admin.kubeconfig ~/.kube/config`\r\n\r\n##### Router Setup (as root)\r\n\r\n- Create certifcate and key:\r\n\r\n```\r\nCA=/openshift.local.config/master\r\nosadm create-server-cert --signer-cert=$CA/ca.crt \\\r\n      --signer-key=$CA/ca.key --signer-serial=$CA/ca.serial.txt \\\r\n      --hostnames='*.cloudapps.example.com' \\\r\n      --cert=cloudapps.crt --key=cloudapps.key\r\ncat cloudapps.crt cloudapps.key $CA/ca.crt > cloudapps.router.pem\r\n```\r\n\r\n- Create the router:\r\n\r\n```\r\nosadm router --default-cert=cloudapps.router.pem \\\r\n      --credentials=/openshift.local.config/master/openshift-router.kubeconfig \\\r\n      --images='openshift/origin-${component}:latest'\r\n```\r\n\r\n- After a few seconds, we get the following:\r\n\r\n```\r\n[root@openshiftdev origin]# osc get pods\r\nNAME              READY     REASON         RESTARTS   AGE\r\nrouter-1-deploy   0/1       ExitCode:255   0          11s\r\n[root@openshiftdev origin]# osc logs router-1-deploy\r\nF0616 20:39:16.075857       1 deployer.go:64] User \"system:anonymous\" cannot get replicationcontrollers in project \"default\"\r\n[root@openshiftdev origin]# osc whoami\r\nsystem:admin\r\n[root@openshiftdev origin]# \r\n```"}}