search

mittwald / kubernetes-secret-generator

Kubernetes controller for automatically generating and updating secrets
Apache License 2.0
329 stars 56 forks source link

The role is missing permissions to access the CRD #75

Closed u8sand closed 2 years ago

u8sand commented 2 years ago

Describe the bug While the ClusterRole is set up properly, the standard Role doesn't have permissions to access the CRD. Thus setting rbac.clusterRole: "false" results in permission errors:

E0313 00:46:07.142403       1 reflector.go:123] pkg/mod/k8s.io/client-go@v0.0.0-20191016111102-bec269661e48/tools/cache/reflector.go:96: Failed to list *v1alpha1.BasicAuth: basicauths.secretgenerator.mittwald.de is forbidden: User "system:serviceaccount:defaultkubernetes-secret-generator" cannot list resource "basicauths" in API group "secretgenerator.mittwald.de" in the namespace "default"

To Reproduce

helm install kubernetes-secret-generator mittwald/kubernetes-secret-generator --set rbac.clusterRole='"false"'

Expected behavior I expect it to work when clusterRole is not enabled.

Environment:

Additional context Awesome chart :clinking_glasses:

mittwald-machine commented 2 years ago

There has not been any activity to this issue in the last 30 days. It will automatically be closed after 7 more days. Remove the stale label to prevent this.