search

disposab1e / sealed-secrets-operator-helm

[DEPRECATED] Sealed Secrets Operator (Helm) installs Sealed Secrets in OpenShift and Kubernetes.
http://sealed-secrets-operator-helm.rtfd.io/
Apache License 2.0
10 stars 16 forks source link

missing rbac for handling ingress #15

Open davidkarlsen opened 3 years ago

davidkarlsen commented 3 years ago

The operator cannot create ingress:

{"level":"error","ts":1631867415.8278918,"logger":"helm.controller","msg":"Release failed","namespace":"sealed-secrets","name":"sealed-secret-controller","apiVersion":"bitnami.com/v1alpha1","kind":"SealedSecretController","release":"sealed-secret-controller","error":"failed to install release: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource: ingresses.networking.k8s.io \"sealed-secret-controller-sealed-secrets\" is forbidden: User \"system:serviceaccount:sealed-secrets:sealed-secrets-operator-helm\" cannot get resource \"ingresses\" in API group \"networking.k8s.io\" in the namespace \"sealed-secrets\"","stacktrace":"github.com/go-logr/zapr.(*zapLogger).Error\n\tpkg/mod/github.com/go-logr/zapr@v0.1.1/zapr.go:128\ngithub.com/operator-framework/operator-sdk/pkg/helm/controller.HelmOperatorReconciler.Reconcile\n\tsrc/github.com/operator-framework/operator-sdk/pkg/helm/controller/reconcile.go:197\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.5.2/pkg/internal/controller/controller.go:256\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.5.2/pkg/internal/controller/controller.go:232\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).worker\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.5.2/pkg/internal/controller/controller.go:211\nk8s.io/apimachinery/pkg/util/wait.JitterUntil.func1\n\tpkg/mod/k8s.io/apimachinery@v0.17.4/pkg/util/wait/wait.go:152\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\tpkg/mod/k8s.io/apimachinery@v0.17.4/pkg/util/wait/wait.go:153\nk8s.io/apimachinery/pkg/util/wait.Until\n\tpkg/mod/k8s.io/apimachinery@v0.17.4/pkg/util/wait/wait.go:88"}
{"level":"error","ts":1631867415.8357806,"logger":"controller-runtime.controller","msg":"Reconciler error","controller":"sealedsecretcontroller-controller","request":"sealed-secrets/sealed-secret-controller","error":"failed to install release: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource: ingresses.networking.k8s.io \"sealed-secret-controller-sealed-secrets\" is forbidden: User \"system:serviceaccount:sealed-secrets:sealed-secrets-operator-helm\" cannot get resource \"ingresses\" in API group \"networking.k8s.io\" in the namespace \"sealed-secrets\"","stacktrace":"github.com/go-logr/zapr.(*zapLogger).Error\n\tpkg/mod/github.com/go-logr/zapr@v0.1.1/zapr.go:128\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.5.2/pkg/internal/controller/controller.go:258\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.5.2/pkg/internal/controller/controller.go:232\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).worker\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.5.2/pkg/internal/controller/controller.go:211\nk8s.io/apimachinery/pkg/util/wait.JitterUntil.func1\n\tpkg/mod/k8s.io/apimachinery@v0.17.4/pkg/util/wait/wait.go:152\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\tpkg/mod/k8s.io/apimachinery@v0.17.4/pkg/util/wait/wait.go:153\nk8s.io/apimachinery/pkg/util/wait.Until\n\tpkg/mod/k8s.io/apimachinery@v0.17.4/pkg/util/wait/wait.go:88"}