jetstack / kube-lego

DEPRECATED: Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt
Apache License 2.0
2.16k stars 269 forks source link

Failed to list *v1beta1.Ingress #335

Closed gyurobenjamin closed 6 years ago

gyurobenjamin commented 6 years ago

In Azure Container Services I'm getting this issue:

github.com/jetstack/kube-lego/pkg/kubelego/watch.go:112: Failed to list *v1beta1.Ingress: User "system:serviceaccount:kube-system:default" cannot list ingresses.extensions at the cluster scope. (get ingresses.extensions)

Any idea how can I debug this? Or maybe what can be this issue?

I installed it with heim. helm install stable/kube-lego --namespace kube-system

Also I tried it with manually and same issue

gyurobenjamin commented 6 years ago

rbac issue, so easy to solve with this way:

helm install stable/kube-lego --namespace kube-system --set config.LEGO_EMAIL=***,config.LEGO_URL=https://acme-v01.api.letsencrypt.org/directory,rbac.create=true