{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/17130","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/17130/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/17130/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/17130/events","html_url":"https://github.com/openshift/origin/issues/17130","id":270324501,"number":17130,"title":"Can't create owner ref to service catalog resource with blockOwnerDeletion: true","user":{"login":"spadgett","id":1167259,"avatar_url":"https://avatars1.githubusercontent.com/u/1167259?v=4","gravatar_id":"","url":"https://api.github.com/users/spadgett","html_url":"https://github.com/spadgett","followers_url":"https://api.github.com/users/spadgett/followers","following_url":"https://api.github.com/users/spadgett/following{/other_user}","gists_url":"https://api.github.com/users/spadgett/gists{/gist_id}","starred_url":"https://api.github.com/users/spadgett/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spadgett/subscriptions","organizations_url":"https://api.github.com/users/spadgett/orgs","repos_url":"https://api.github.com/users/spadgett/repos","events_url":"https://api.github.com/users/spadgett/events{/privacy}","received_events_url":"https://api.github.com/users/spadgett/received_events","type":"User","site_admin":false},"labels":[{"id":210157112,"url":"https://api.github.com/repos/openshift/origin/labels/component/kubernetes","name":"component/kubernetes","color":"0052cc","default":false},{"id":118251699,"url":"https://api.github.com/repos/openshift/origin/labels/kind/bug","name":"kind/bug","color":"fc2929","default":false},{"id":683887368,"url":"https://api.github.com/repos/openshift/origin/labels/sig/master","name":"sig/master","color":"f9d0c4","default":false}],"state":"closed","locked":false,"assignee":{"login":"mfojtik","id":44136,"avatar_url":"https://avatars2.githubusercontent.com/u/44136?v=4","gravatar_id":"","url":"https://api.github.com/users/mfojtik","html_url":"https://github.com/mfojtik","followers_url":"https://api.github.com/users/mfojtik/followers","following_url":"https://api.github.com/users/mfojtik/following{/other_user}","gists_url":"https://api.github.com/users/mfojtik/gists{/gist_id}","starred_url":"https://api.github.com/users/mfojtik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mfojtik/subscriptions","organizations_url":"https://api.github.com/users/mfojtik/orgs","repos_url":"https://api.github.com/users/mfojtik/repos","events_url":"https://api.github.com/users/mfojtik/events{/privacy}","received_events_url":"https://api.github.com/users/mfojtik/received_events","type":"User","site_admin":false},"assignees":[{"login":"mfojtik","id":44136,"avatar_url":"https://avatars2.githubusercontent.com/u/44136?v=4","gravatar_id":"","url":"https://api.github.com/users/mfojtik","html_url":"https://github.com/mfojtik","followers_url":"https://api.github.com/users/mfojtik/followers","following_url":"https://api.github.com/users/mfojtik/following{/other_user}","gists_url":"https://api.github.com/users/mfojtik/gists{/gist_id}","starred_url":"https://api.github.com/users/mfojtik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mfojtik/subscriptions","organizations_url":"https://api.github.com/users/mfojtik/orgs","repos_url":"https://api.github.com/users/mfojtik/repos","events_url":"https://api.github.com/users/mfojtik/events{/privacy}","received_events_url":"https://api.github.com/users/mfojtik/received_events","type":"User","site_admin":false},{"login":"liggitt","id":980082,"avatar_url":"https://avatars0.githubusercontent.com/u/980082?v=4","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false}],"milestone":null,"comments":5,"created_at":"2017-11-01T14:23:05Z","updated_at":"2017-11-07T18:07:30Z","closed_at":"2017-11-07T18:07:30Z","author_association":"CONTRIBUTOR","body":"I'd like to create an owner ref from a secret to a service catalog service instance with `blockOwnerDeletion: true` so that it gets garbage collected when the instance is deleted (if not in 3.7, in a future release where that works). I see a 403 error trying to create the secret, however.\r\n\r\nIf I use `blockOwnerDeletion: false`, there are no errors.\r\n\r\n```json\r\n{\r\n  \"kind\": \"Status\",\r\n  \"apiVersion\": \"v1\",\r\n  \"metadata\": {},\r\n  \"status\": \"Failure\",\r\n  \"message\": \"secrets \\\"mongodb-persistent-parameterso04kv\\\" is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to a resource you can't set finalizers on: User \\\"sam\\\" cannot update serviceinstances/finalizers.servicecatalog.k8s.io in project \\\"mongo-test\\\", \\u003cnil\\u003e\",\r\n  \"reason\": \"Forbidden\",\r\n  \"details\": {\r\n    \"name\": \"mongodb-persistent-parameterso04kv\",\r\n    \"kind\": \"secrets\"\r\n  },\r\n  \"code\": 403\r\n}\r\n```\r\n\r\nHere is the POST request body:\r\n\r\n```json\r\n{\r\n   \"apiVersion\":\"v1\",\r\n   \"kind\":\"Secret\",\r\n   \"metadata\":{\r\n      \"name\":\"mongodb-persistent-parameterso04kv\",\r\n      \"ownerReferences\":[\r\n         {\r\n            \"apiVersion\":\"servicecatalog.k8s.io/v1beta1\",\r\n            \"kind\":\"ServiceInstance\",\r\n            \"name\":\"mongodb-persistent-jjhmd\",\r\n            \"uid\":\"3ff6e085-bf0f-11e7-bf11-0242ac110002\",\r\n            \"controller\":false,\r\n            \"blockOwnerDeletion\":true\r\n         }\r\n      ]\r\n   },\r\n   \"type\":\"Opaque\",\r\n   \"stringData\":{\r\n      \"parameters\":\"{\\\"DATABASE_SERVICE_NAME\\\":\\\"mongodb\\\",\\\"MEMORY_LIMIT\\\":\\\"512Mi\\\",\\\"MONGODB_DATABASE\\\":\\\"sampledb\\\",\\\"MONGODB_VERSION\\\":\\\"3.2\\\",\\\"NAMESPACE\\\":\\\"openshift\\\",\\\"VOLUME_CAPACITY\\\":\\\"1Gi\\\"}\"\r\n   }\r\n}\r\n```\r\n\r\ncc @pmorie @deads2k @jwforres "},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/342570616","html_url":"https://github.com/openshift/origin/issues/17130#issuecomment-342570616","issue_url":"https://api.github.com/repos/openshift/origin/issues/17130","id":342570616,"user":{"login":"spadgett","id":1167259,"avatar_url":"https://avatars1.githubusercontent.com/u/1167259?v=4","gravatar_id":"","url":"https://api.github.com/users/spadgett","html_url":"https://github.com/spadgett","followers_url":"https://api.github.com/users/spadgett/followers","following_url":"https://api.github.com/users/spadgett/following{/other_user}","gists_url":"https://api.github.com/users/spadgett/gists{/gist_id}","starred_url":"https://api.github.com/users/spadgett/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spadgett/subscriptions","organizations_url":"https://api.github.com/users/spadgett/orgs","repos_url":"https://api.github.com/users/spadgett/repos","events_url":"https://api.github.com/users/spadgett/events{/privacy}","received_events_url":"https://api.github.com/users/spadgett/received_events","type":"User","site_admin":false},"created_at":"2017-11-07T18:07:30Z","updated_at":"2017-11-07T18:07:30Z","author_association":"CONTRIBUTOR","body":"Closing since `blockOwnerDeletion` isn't needed for garbage collection"}}
{"actor":{"display_login":"spadgett"}}