When applying this module with metrics exporterenabled using v0.12.3, we get the following error:
│ Error: serviceaccounts is forbidden: User "system:serviceaccount:sre:terraform" cannot create resource "serviceaccounts" in API group "" in the namespace "sre"
│
│ with module.confluent_kafka_cluster_staging.kubernetes_service_account.lag_exporter_service_account[0],
│ on .terraform/modules/confluent_kafka_cluster_staging/kafka-lag-exporter.tf line 10, in resource "kubernetes_service_account" "lag_exporter_service_account":
│ 10: resource "kubernetes_service_account" "lag_exporter_service_account" {
│
...
│ Error: secrets is forbidden: User "system:serviceaccount:sre:terraform" cannot create resource "secrets" in API group "" in the namespace "sre"
│
│ with module.confluent_kafka_cluster_staging.kubernetes_secret.lag_exporter_config[0],
│ on .terraform/modules/confluent_kafka_cluster_staging/kafka-lag-exporter.tf line 20, in resource "kubernetes_secret" "lag_exporter_config":
│ 20: resource "kubernetes_secret" "lag_exporter_config" {
│
This terraform module does not include any k8s rolebindings so I'm not sure where the kafka cluster on gke is being provisoned and how to grant the proper access for system:serviceaccount:sre:terraform
When applying this module with
metrics exporter
enabled usingv0.12.3
, we get the following error: