Service binding to Event Streams service stuck in pending state

[guang-shi]

Service binding to Event Streams service stuck in pending state

[guang-shi]

BTW, we have similar service binding to Elastic Search service which is working fine.

apiVersion: ibmcloud.ibm.com/v1
kind: Service
metadata:
    name: {{.Values.elasticsearch_service_name}}
    namespace: {{ .Release.Namespace }}
spec:
    serviceClass: databases-for-elasticsearch
    plan: Alias

---

apiVersion: ibmcloud.ibm.com/v1
kind: Binding
metadata:
  name: {{ .Release.Namespace }}-es-creds
  annotations:
    ibmcloud.ibm.com/keyId: {{ .Values.elasticsearch_credential_keyId }}
spec:
  serviceName: {{.Values.elasticsearch_service_name}}
  alias: {{.Values.elasticsearch_credential_name}}

describe-binding-elastic.txt
describe-service-elastic.txt

[guang-shi]

Attached are the ibmcloud operator pod logs.
op-manager.txt

021-05-25T19:28:35.992Z	INFO	controllers.Binding	ibmcloud/ibmcloud.go:83	Context	{"binding": "ca-sci-shig/ca-sci-shig-eventstreams-creds", "is": {"region":"us-south","resourcegroupid":"5ab05b0ec1624136be184ca5d2911b5f","resourcelocation":"us-south","user":"[email protected]"}}
2021-05-25T19:28:36.732Z	INFO	controllers.Binding	controllers/binding_controller.go:286	ServiceInstance Key	{"binding": "ca-sci-shig/ca-sci-shig-eventstreams-creds", "User": "[email protected]", "should already exist, verifying": "ca-sci-shig-eventstreams-creds"}
2021-05-25T19:28:36.732Z	INFO	controllers.Binding	controllers/binding_controller.go:422	Getting	{"binding": "ca-sci-shig/ca-sci-shig-eventstreams-creds", "User": "[email protected]", " alias credentials": "ca-sci-shig-eventstreams-creds"}
2021-05-25T19:28:37.433Z	INFO	controllers.Binding	controllers/binding_controller.go:565	Deleting 	{"secret": ""}
2021-05-25T19:28:37.512Z	INFO	controllers.Binding	ibmcloud/ibmcloud.go:83	Context	{"binding": "ca-sci-shig/ca-sci-shig-eventstreams-creds", "is": {"region":"us-south","resourcegroupid":"5ab05b0ec1624136be184ca5d2911b5f","resourcelocation":"us-south","user":"[email protected]"}}
2021-05-25T19:28:38.328Z	INFO	controllers.Binding	controllers/binding_controller.go:422	Getting	{"binding": "ca-sci-shig/ca-sci-shig-eventstreams-creds", "User": "[email protected]", " alias credentials": "ca-sci-shig-eventstreams-creds"}
2021-05-25T19:28:38.692Z	INFO	controllers.Binding	controllers/binding_controller.go:259	Error retrieving alias credentials	{"binding": "ca-sci-shig/ca-sci-shig-eventstreams-creds", "User": "[email protected]", "ca-sci-shig-eventstreams-creds": "Not Found"}
2021-05-25T19:28:38.711Z	INFO	controllers.Binding	controllers/binding_controller.go:381	Not Found

[guang-shi]

The root cause was the service-id used to install/run ICO did not have Access Policies to the Event Streams IAM-enabled service.