search

nats-io / nats-streaming-operator

NATS Streaming Operator
Apache License 2.0
174 stars 44 forks source link

correctly bind cluster operator role to service account #65

Closed willejs closed 4 years ago

willejs commented 4 years ago

I am running the NATS streaming operator with the default clusterScoped: false in a namespace in a test cluster whilst we evaluate it internally. Currently it does not map the role binding correctly, and the operator fails to start with the below error. This patch fixes it.

natsstreamingclusters.streaming.nats.io is forbidden: User "system:serviceaccount:incubator:nats-streaming-operator" cannot list resource "natsstreamingclusters" in API group "streaming.nats.io" in the namespace "incubator": RBAC:clusterrole.rbac.authorization.k8s.io "nats-streaming-operator" not found
willejs commented 4 years ago

@wallyqs do you think we could get this merged? Thanks!