search

CrowdStrike / falcon-operator

https://artifacthub.io/packages/olm/falcon-operator/falcon-operator
Apache License 2.0
43 stars 33 forks source link

Admission controller service account permissions in OpenShift #542

Closed tarexveff closed 3 weeks ago

tarexveff commented 1 month ago

Creating an instance of the admission controller via Operator on OpenShift 4.13 resulted in a crashLoop of both admission controller pods with the error:

"Failed to read webhook metadata" "error"="validatingwebhookconfigurations.admissionregistration.k8s.io is forbidden: User \"system:serviceaccount:falcon-admission:falcon-operator-admission-controller\" cannot list resource \"validatingwebhookconfigurations\" in API group \"admissionregistration.k8s.io\" at the cluster scope""

I believe I followed the instructions correctly, and I don't recall seeing steps to add other role bindings to the service account. Thanks!

@evanstoner

redhatrises commented 1 month ago

Thanks for opening this. The fixes are already merged into the main branch which the next release will resolve should resolve this problem.

tarexveff commented 1 month ago

Thank you!

coolhome commented 1 month ago

@redhatrises is there any release scheduled for this?

redhatrises commented 3 weeks ago

The certified version 1.0.1 has been released and is available via the openshift console.