search

SneaksAndData / arcane-operator

Kubernetes-native data streaming service based on Akka.NET
Apache License 2.0
0 stars 2 forks source link

[BUG] Arcane Helm Chart ships with insufficient rights for jobs/status for GKE #119

Open jrbentzon opened 1 month ago

jrbentzon commented 1 month ago

Description

On GKE, Arcane Operator fails to manage jobs as it lacks the jobs/status privileges on the built-in cluster-roles / role-assignments.

Steps to reproduce the issue

  1. Create GKE cluster with Arcane Operator installed from helm
  2. Create new Stream
  3. Try to manage that stream by annotating it
  4. Arcane operator fails to find job but also cant submit conflicting job 
    [11:15:51 WRN] Failed to find a job arcane/my-job
[11:15:51 INF] Modified a stream definition with id my-job
[11:15:51 INF] Starting a new stream job with an id my-job
[11:15:51 WRN] Streaming job with ID my-job already exists

Describe the results you expected

Correct management of stream

System information

v0.0.10

s-vitaliy commented 1 month ago

A note for future me: I have never seen anything like that in a clear EKS installation, need a GKE cluster to reproduce the issue, probably something is wrong with RBAC setup in the Helm chart.

s-vitaliy commented 1 month ago

For now, this is a third-priority issue since we have no GKE installations and @jrbentzon has already applied a workaround.