Comment 1 for bug 1713573

contrail-kube-manager was not having required access to post on Openshift API server. Following has solved the problem.

[root@5b7s18 ~]#
[root@5b7s18 ~]#
[root@5b7s18 ~]# oc project juniper
Already on project "juniper" on server "https://5b7s18.englab.juniper.net:8443".
[root@5b7s18 ~]# oc create serviceaccount useroot
Error from server (AlreadyExists): serviceaccounts "useroot" already exists
[root@5b7s18 ~]# oadm policy add-cluster-role-to-user cluster-admin system:serviceaccount:juniper:useroot
cluster role "cluster-admin" added: "system:serviceaccount:juniper:useroot"
[root@5b7s18 ~]# oadm policy add-scc-to-user privileged system:serviceaccount:juniper:useroot
[root@5b7s18 ~]# oc serviceaccounts get-token useroot
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJqdW5pcGVyIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6InVzZXJvb3QtdG9rZW4tNjdjaDciLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoidXNlcm9vdCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjczZmE0NWZlLTg4MDQtMTFlNy1iMWE0LTBjYzQ3YWE4OWU2NCIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpqdW5pcGVyOnVzZXJvb3QifQ.OSX5C2Ms0-lCF4FEhirQCq5UYBGqNubomTXY5Oc6bIgNhLt-X7bwgg8GCay5kj2nhfY3EqpdQ4reZr42MaCFc8sZtCZ2EEDe0fzzhiUTCmxTSTXrt9Dbm4kQkHQlMUk47RL1LYR5yMn9KA0MyzXsXOxpNLm1aZ4QuCjRxz_h438bxqMR9OYrUp18qAZ-kWtefJIPy17-XK2Tr0xyuX2oKI-9IgVMqDTtnIBsBNc82NalkRGyb8V-R6-wgrXkeMwlfO5pU2uzZpW4wVTsXeK9ctBC0E4C-z0soYQ-q-JPa5FrletQ_NxCAB8OIv5ndy5KPiI5cgd39HDCpe7EIPAOnw