search

curityio / idsvr-helm

This repository contains the Curity Identity Server helm chart source code.
Apache License 2.0
10 stars 21 forks source link

Fix Conf Job Role & RoleBinding timing #28

Closed jlmart88 closed 2 years ago

jlmart88 commented 2 years ago

Fixes an issue where the conf job could fail with an an Unauthorized error due to the service account not having proper permissions:

depth=1 CN = kubernetes
verify return:1
depth=0 CN = kube-apiserver
verify return:1
HTTP/1.1 403 Forbidden
Audit-Id: e1b63eb0-de77-482a-91c7-e7e6efd23460
Cache-Control: no-cache, private
Content-Type: application/json
X-Content-Type-Options: nosniff
Date: Wed, 06 Oct 2021 17:35:15 GMT
Content-Length: 434
Connection: close

{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"secrets \"identity-server-test-cluster-config-xml\" is forbidden: User \"system:serviceaccount:identity-dev-test:identity-server-test-service-account\" cannot patch resource \"secrets\" in API group \"\" in the namespace \"identity-dev-test\"","reason":"Forbidden","details":{"name":"identity-server-test-cluster-config-xml","kind":"secrets"},"code":403}