1Password / connect-helm-charts

Official 1Password Helm Charts
https://developer.1password.com
MIT License
90 stars 73 forks source link

1Password Connect not using onepassword-connect-operator Service Account #191

Open ahussey-redhat opened 5 months ago

ahussey-redhat commented 5 months ago

Your environment

Chart Version: 1.15.0

Helm Version: N/A (deployed using ArgoCD)

Kubernetes Version: OpenShift 4.15.3

What happened?

When deploying 1Password Connect, the connect pod fails to start because the SCC that is required (anyuid) isn't associated with the default Service Account. It is however associated with the onepassword-connect-operator Service Account. By manually modifying the deployment, and specifying serviceAccount: onepassword-connect-operator, the issue is resolved and the deployment is successful.

What did you expect to happen?

The deployment to deploy successfully.

Steps to reproduce

  1. Deploy the 1Password Connect Operator using Helm on OpenShift
  2. Watch the 1Password Connect Deployment fail due to SCC errors

Notes & Logs

If you could add the following stanza to the connect definition in the Helm values, and use that to define the service account for the onepassword-connect Deployment, this issue will be resolve

  serviceAccount:
    create: true
    annotations: {}
    name: onepassword-connect-operator