googlearchive / k8s-service-catalog

[DEPRECATED] Commandline tool to manage Service Catalog lifecycle and GCP Service Broker atop Kubernetes Cluster
Apache License 2.0
69 stars 31 forks source link

Common error "forbidden: attempt to grant extra privileges" should describe solution in error message #35

Closed seans3 closed 6 years ago

seans3 commented 7 years ago

If the command-line user does not have the "cluster-admin" role, then she will not be able to set the RBAC roles for service catalog. The error message has the following snippet:

...forbidden: attempt to grant extra privileges...

This error should include the necessary fix:

kubectl create clusterrolebinding cluster-admin-binding --clusterrole=cluster-admin --user=quanlin@google.com