can't view snapshot list in latest version of konflux
40 views
Skip to first unread message
Andy Anderson
Aug 4, 2025, 9:57:40 AMAug 4
to Konflux CI
when logged in as either user1 or user2 I can create applications and integrations. Snapshots are created successfully. When I click on "snapshots" in the horizontal menu I get 403. I dont know how to update user1 and user2 to get access to this page. I can click on snapshot urls in the component details and then I can view individual snapshots just fine.
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"message": "forbidden: User "us...@konflux.dev" cannot get path "/plugins/kubearchive/apis/appstudio.redhat.com/v1alpha1/namespaces/user-ns1/snapshots": Authorization failed. Opc-Request-Id: \u003cnil\u003e",
"reason": "Forbidden",
"details": {},
"code": 403
}
I am installed on kube v1.33.1
Andy Anderson
Aug 5, 2025, 2:32:37 PMAug 5
to Konflux CI
there is an open issue for this and now a PR. Looks like this will get solved here shortly.
Andy Anderson
Aug 7, 2025, 11:09:03 AMAug 7
to Konflux CI
I got the latest fix - but...
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"reason": "Forbidden",
"details": {},
"code": 403
}
finding this in my web console logs. I have tried a number of different rolebinding and clusterrolebinding combinations to get this working
```
```
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"message": "forbidden: User \"an...@clubanderson.com\" cannot get path \"/plugins/kubearchive/apis/appstudio.redhat.com/v1alpha1/namespaces/user-ns1/snapshots\": Authorization failed. Opc-Request-Id: \u003cnil\u003e",
"reason": "Forbidden",
"details": {},
"code": 403
}
```
please advise
please advise
Andy Anderson
Aug 11, 2025, 10:30:20 AMAug 11
to Konflux CI
I edited the proxy deployment and found
Was in use. This does not match the latest at https://github.com/konflux-ci/konflux-ci/blob/main/konflux-ci/ui/core/proxy/proxy.yaml
So, I changed it to
And then the pod recreated and the snapshots now work.
The proxy deployment, in my case, has settings for oidc (sso with GH) and therefore whenever it is overwritten by the installer, I have to overwrite it again with my settings. This must have caused issues with replacing the image name.
Marta Anon
Aug 12, 2025, 3:27:39 AMAug 12
to Andy Anderson, Konflux CI
This is good news!
Thanks for letting us know :)
--
You received this message because you are subscribed to the Google Groups "Konflux CI" group.
To unsubscribe from this group and stop receiving emails from it, send an email to konflux+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/konflux/948c33c4-c51a-45d5-8a9b-78b10067b578n%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Marta Anon
Aug 14, 2025, 6:38:53 AMAug 14
to Konflux CI, Andy Anderson
Added Konflux CI google group
---------- Forwarded message ---------
From: Andrew Anderson <and...@gmail.com>
Date: Wed, Aug 13, 2025 at 3:57 PM
Subject: Re: can't view snapshot list in latest version of konflux
To: Marta Anon <ma...@redhat.com>
From: Andrew Anderson <and...@gmail.com>
Date: Wed, Aug 13, 2025 at 3:57 PM
Subject: Re: can't view snapshot list in latest version of konflux
To: Marta Anon <ma...@redhat.com>
Marta,
Now that I can view snapshots, I was able to create a release using the UI. However, I am now seeing the same kind of error wrt not listing releases. Please advise
Andy
On Aug 7, 2025, at 12:35 PM, Marta Anon <ma...@redhat.com> wrote:My guess is that for some reason the latest fix isn't in place, can you check what Yftach mentions in the related issue? https://github.com/konflux-ci/konflux-ci/issues/2805#issuecomment-3163942237On Thu, Aug 7, 2025 at 6:33 PM Andrew Anderson <and...@gmail.com> wrote:Thanks, Marta. I dont mind installing and using kubearchive, but the UI is still showing no results - so it is not using the alternate request you mentioned.On Aug 7, 2025, at 12:23 PM, Marta Anon <ma...@redhat.com> wrote:Hey Andy,
That error is due to not having installed kubearchive, not because of RBAC configuration, but that is ok, you should be able to see snapshots even with that error in your console, kubearchive is not required.
The UI is also doing another request to "apis/appstudio.redhat.com/v1alpha1/namespaces/user-ns1/snapshots/" (without the `plugins/kubearchive` part) and the output of that request is what you should see rendered in the UI after the latest fix
--
You received this message because you are subscribed to the Google Groups "Konflux CI" group.
To unsubscribe from this group and stop receiving emails from it, send an email to konflux+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/konflux/eed9bff2-218a-4baa-80e8-5814aa32a7f4n%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Marta Anon
Aug 14, 2025, 7:08:30 AMAug 14
to Konflux CI, Andy Anderson
Hey Andy,
In the snapshot you are in the Snapshots page, and the errors suggest that your UI is experiencing problems when reaching kubernetes API. With that information I cannot tell what could be the problem.
Could you please show us what's happening regarding the calls of the snapshots/releases to kubernetes API?
You should be able to see those under the network tab.
I use chrome so this shows a little different, but you should be able to find something like this with the Network tab opened of your browser inspector and refreshing the page:
From what you are sharing I think that you don't get a 200 OK from that request
Could you please show us what's happening regarding the calls of the snapshots/releases to kubernetes API?
You should be able to see those under the network tab.
I use chrome so this shows a little different, but you should be able to find something like this with the Network tab opened of your browser inspector and refreshing the page:
From what you are sharing I think that you don't get a 200 OK from that request
The request in your case should be instead:
You can also try that query directly in your browser and see what returns
Marta Anon
Aug 14, 2025, 8:21:13 AMAug 14
to Konflux CI, Andy Anderson
Sorry, the request in your case should be:
https://129.158.49.213.nip.io/api/k8s/apis/appstudio.redhat.com/v1alpha1/namespaces/user-ns1/releases?labelSelector=appstudio.openshift.io%2Fapplication%3Dllm-d
https://129.158.49.213.nip.io/api/k8s/apis/appstudio.redhat.com/v1alpha1/namespaces/user-ns1/releases?labelSelector=appstudio.openshift.io%2Fapplication%3Dllm-d
Andrew Anderson
Aug 14, 2025, 9:13:19 AMAug 14
to Marta Anon, Konflux CI
Sorry, snapshots are working due to the fix that was provided last week. Releases are not. Here is the page that lists releases. Same errors in the console that I saw for snapshots. Still trying to reach kubearchive instead of direct listing. We need the same fix that was applied for snapshots for releases. Should be easy to duplicate the fix.
On Aug 14, 2025, at 8:20 AM, Marta Anon <ma...@redhat.com> wrote:
Sorry, the request in your case should be:
https://129.158.49.213.nip.io/api/k8s/apis/appstudio.redhat.com/v1alpha1/namespaces/user-ns1/releases?labelSelector=appstudio.openshift.io%2Fapplication%3Dllm-d
On Thu, Aug 14, 2025 at 1:08 PM Marta Anon <ma...@redhat.com> wrote:
Hey Andy,
In the snapshot you are in the Snapshots page, and the errors suggest that your UI is experiencing problems when reaching kubernetes API. With that information I cannot tell what could be the problem.
Could you please show us what's happening regarding the calls of the snapshots/releases to kubernetes API?
You should be able to see those under the network tab.
I use chrome so this shows a little different, but you should be able to find something like this with the Network tab opened of your browser inspector and refreshing the page:
<image.png>
From what you are sharing I think that you don't get a 200 OK from that request
The request in your case should be instead:
You can also try that query directly in your browser and see what returns
On Thu, Aug 14, 2025 at 12:38 PM Marta Anon <ma...@redhat.com> wrote:
Added Konflux CI google group
---------- Forwarded message ---------
From: Andrew Anderson <and...@gmail.com>
Date: Wed, Aug 13, 2025 at 3:57 PM
Subject: Re: can't view snapshot list in latest version of konflux
To: Marta Anon <ma...@redhat.com>
Marta,Now that I can view snapshots, I was able to create a release using the UI. However, I am now seeing the same kind of error wrt not listing releases. Please advise
Marta Anon
Aug 14, 2025, 11:42:59 AMAug 14
to Andrew Anderson, Konflux CI
Oh but that is a different thing, it shows that there are no releases in place, not an error like it did for the snapshots view. (note that you are having a not found and not an "Unable to load" image)
Also, please keep in mind what I mentioned before, the kubearchive errors shown in the console are indeed expected.
My guess is that there are no releases and that's why you are seeing that. To prove it, can you do the following?
`kubectl get releases.appstudio.redhat.com -n user-ns1`
see if it outputs something, and if it does, then check go here in the browser:
Also, please keep in mind what I mentioned before, the kubearchive errors shown in the console are indeed expected.
My guess is that there are no releases and that's why you are seeing that. To prove it, can you do the following?
`kubectl get releases.appstudio.redhat.com -n user-ns1`
see if it outputs something, and if it does, then check go here in the browser:
Andrew Anderson
Aug 14, 2025, 11:44:47 AMAug 14
to Marta Anon, Konflux CI
Nope. One exists
kubectl get releases.appstudio.redhat.com -n user-ns1
NAME SNAPSHOT RELEASEPLAN RELEASE STATUS AGE
sre-productionnr4lc llm-d-27jfz sre-production Progressing 46h
On Aug 14, 2025, at 11:42 AM, Marta Anon <ma...@redhat.com> wrote:
Oh but that is a different thing, it shows that there are no releases in place, not an error like it did for the snapshots view. (note that you are having a not found and not an "Unable to load" image)
Also, please keep in mind what I mentioned before, the kubearchive errors shown in the console are indeed expected.
My guess is that there are no releases and that's why you are seeing that. To prove it, can you do the following?
`kubectl get releases.appstudio.redhat.com -n user-ns1`
see if it outputs something, and if it does, then check go here in the browser:
On Thu, Aug 14, 2025 at 3:13 PM Andrew Anderson <and...@gmail.com> wrote:
Sorry, snapshots are working due to the fix that was provided last week. Releases are not. Here is the page that lists releases. Same errors in the console that I saw for snapshots. Still trying to reach kubearchive instead of direct listing. We need the same fix that was applied for snapshots for releases. Should be easy to duplicate the fix.
Marta Anon
Aug 14, 2025, 11:47:02 AMAug 14
to Andrew Anderson, Konflux CI
can you show me the labels of your release?
Pease run:
kubectl get releases.appstudio.redhat.com -n user-ns1 --show-labels
Pease run:
kubectl get releases.appstudio.redhat.com -n user-ns1 --show-labels
Andrew Anderson
Aug 14, 2025, 11:49:06 AMAug 14
to Marta Anon, Konflux CI
NAME SNAPSHOT RELEASEPLAN RELEASE STATUS AGE LABELS
sre-productionnr4lc llm-d-27jfz sre-production Progressing 46h release.appstudio.openshift.io/author=andy.clubanderson.com
Marta Anon
Aug 14, 2025, 12:04:00 PMAug 14
to Andrew Anderson, Konflux CI
ok, I see at least part of the problem, the UI is looking for releases with the label `appstudio.openshift.io/application=llm-d` but the release isn't properly labeled, that may be a bug, how did you create the release?
Andrew Anderson
Aug 14, 2025, 12:11:06 PMAug 14
to Marta Anon, Konflux CI
Created with UI - clicked create release under snapshots - trigger release
Ryan Cole
Aug 14, 2025, 3:06:48 PMAug 14
to Andrew Anderson, Marta Anon, Konflux CI
Hey Andy,
Couple of questions. First, did you create the snapshot manually or was it created automatically by the integration service after a build finished? Second, can you tell me whether the label `appstudio.openshift.io/application=llm-d` is set on the snapshot?
Couple of questions. First, did you create the snapshot manually or was it created automatically by the integration service after a build finished? Second, can you tell me whether the label `appstudio.openshift.io/application=llm-d` is set on the snapshot?
To view this discussion visit https://groups.google.com/d/msgid/konflux/3CDEA2E4-4551-4950-9CBE-B0E540B60979%40gmail.com.
For more options, visit https://groups.google.com/d/optout.
Andrew Anderson
Aug 14, 2025, 3:15:15 PMAug 14
to Ryan Cole, Marta Anon, Konflux CI
A snapshot was created when a PR was issued (I also have snapshots from starting a build from the UI in the components). I then click “trigger release” from the snapshot. Yes, the snapshot I used to “trigger release” in the UI has the label you asked about.
k get snapshots -n user-ns1 --show-labels
NAME AGE LABELS
llm-d-27jfz 7d1h appstudio.openshift.io/application=llm-d,appstudio.openshift.io/build-pipelinerun=llm-d-inference-scheduler-on-push-sdbst,appstudio.openshift.io/component=llm-d-inference-scheduler,pac.test.appstudio.openshift.io/check-run-id=47618332731,pac.test.appstudio.openshift.io/event-type=push,pac.test.appstudio.openshift.io/original-prname=llm-d-inference-scheduler-on-push,pac.test.appstudio.openshift.io/repository=llm-d-inference-scheduler,pac.test.appstudio.openshift.io/sha=85c0217fb82445f79e1584d4ac750a01fff97b03,pac.test.appstudio.openshift.io/state=completed,pac.test.appstudio.openshift.io/url-org=clubanderson,pac.test.appstudio.openshift.io/url-repository=llm-d-inference-scheduler,test.appstudio.openshift.io/pipelinerunfinishtime=1754588804,test.appstudio.openshift.io/type=component
Brian Cook
Aug 15, 2025, 3:57:56 PMAug 15
to Andrew Anderson, Ryan Cole, Marta Anon, Konflux CI
I don't know if it makes any difference but I've never released a PR snapshot before - typically you'd merge the PR, then release that snapshot. If you turn on auto-release for for the releasePlan, it is only going to release merge snapshots.
To view this discussion visit https://groups.google.com/d/msgid/konflux/9FB1A3CC-579A-45AA-A3EF-35955613927B%40gmail.com.
Reply all
Reply to author
Forward
0 new messages