[JIRA] (JENKINS-60369) Kubernetes plugin is trying to create PVC when there are no volumes specified

[vladimir_muk...@epam.com (JIRA)]

Title: Message Title

Vladimir Mukhin created an issue   Jenkins / JENKINS-60369 Kubernetes plugin is trying to create PVC when there are no volumes specified Issue Type: Bug Assignee: Unassigned Components: kubernetes-plugin Created: 2019-12-04 17:03 Environment: kubernetes-plugin: 1.19.3 jenkins: 2.176.2 kuberentes: 1.13 AWS EKS Priority: Critical Reporter: Vladimir Mukhin There are no volumes specified in our Pod template. Even though, Jenkins is trying to create a PVC and fails with an access denied error. /var/log/jenkins/jenkins.log io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: POST at: https://1293c2340bb6c04946f7328ce8ca2ad7.sk1.us-east-1.eks.amazonaws.com /api/v1/namespaces/ci/persistentvolumeclaims. Message: Forbidden! User kube-aws-translator-admin doesn't have permission. persistentvolumeclaims is forbidde n: User "system:serviceaccount:ci:jenkins" cannot create resource "persistentvolumeclaims" in API group "" in the namespace "ci". at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:510) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:447) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:413) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:372) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleCreate(OperationSupport.java:241) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleCreate(BaseOperation.java:819) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.create(BaseOperation.java:334) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.create(BaseOperation.java:330) at org.csanchez.jenkins.plugins.kubernetes.volumes.workspace.DynamicPVCWorkspaceVolume.createVolume(DynamicPVCWorkspaceVolume.java:94) at org.csanchez.jenkins.plugins.kubernetes.KubernetesLauncher.launch(KubernetesLauncher.java:130) at hudson.slaves.SlaveComputer$1.call(SlaveComputer.java:294) at jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46) at jenkins.security.ImpersonatingExecutorService$2.call(ImpersonatingExecutorService.java:71) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)     Add Comment   This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.203414.1575479008000.168.1575479040165%40Atlassian.JIRA.