search

java-operator-sdk / samples

Sample Operators using the Java Operator SDK
7 stars 12 forks source link

Problem to run operator tomcat #7

Open u650080 opened 2 years ago

u650080 commented 2 years ago

When I tried to deploy the tomcat-operator, we saw this problem in the operator pod Exception in thread "main" io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://10.233.0.1/apis/apiextensions.k8s.io/v1/customresourcedefinitions/tomcats.tomcatoperator.io. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. customresourcedefinitions.apiextensions.k8s.io "tomcats.tomcatoperator.io" is forbidden: User "system:serviceaccount:tomcat-operator:tomcat-operator" cannot get resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope. at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:583) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:520) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:487) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:448) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:415) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:397) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleGet(BaseOperation.java:924) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.getMandatory(BaseOperation.java:219) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.get(BaseOperation.java:185) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.get(BaseOperation.java:86) at io.javaoperatorsdk.operator.Operator.register(Operator.java:146) at io.javaoperatorsdk.operator.Operator.register(Operator.java:97) at io.javaoperatorsdk.operator.sample.TomcatOperator.main(TomcatOperator.java:29)

I used minikube 1.22.0 (client kubectl 1.21.3 and server 1.21.2) and other system client kubectl 1.16.3 and server 1.16.3

u650080 commented 2 years ago

There is an issue with rules section of k8s/operator.yaml

apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: tomcat-operator rules: