openshift-cloud-functions / knative-operators

Integration for Knative and the Operator Lifecycle Manager
Apache License 2.0
21 stars 27 forks source link

Insufficient permissions for knative-eventing-operator #44

Open nicolaferraro opened 5 years ago

nicolaferraro commented 5 years ago

When trying to install on minishift I get the following:

knative-eventing-operator-ff46c44d-4rlt2 knative-eventing-operator {"level":"error","ts":1557842923.7672348,"logger":"kubebuilder.controller","msg":"Reconciler error","controller":"install-controller","request":"knative-eventing/knative-eventing","error":"clusterroles.rbac.authorization.k8s.io \"addressable-resolver\" is forbidden: must have cluster-admin privileges to use the aggregationRule","stacktrace":"github.com/openshift-knative/knative-eventing-operator/vendor/github.com/go-logr/zapr.(*zapLogger).Error\n\t/home/matzew/go/src/github.com/openshift-knative/knative-eventing-operator/vendor/github.com/go-logr/zapr/zapr.go:128\ngithub.com/openshift-knative/knative-eventing-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/matzew/go/src/github.com/openshift-knative/knative-eventing-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:217\ngithub.com/openshift-knative/knative-eventing-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1\n\t/home/matzew/go/src/github.com/openshift-knative/knative-eventing-operator/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:158\ngithub.com/openshift-knative/knative-eventing-operator/vendor/k8s.io/apimachinery/pkg/util/wait.JitterUntil.func1\n\t/home/matzew/go/src/github.com/openshift-knative/knative-eventing-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:133\ngithub.com/openshift-knative/knative-eventing-operator/vendor/k8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/home/matzew/go/src/github.com/openshift-knative/knative-eventing-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:134\ngithub.com/openshift-knative/knative-eventing-operator/vendor/k8s.io/apimachinery/pkg/util/wait.Until\n\t/home/matzew/go/src/github.com/openshift-knative/knative-eventing-operator/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:88"}

Fixed it manually with: oc adm policy add-cluster-role-to-user cluster-admin --serviceaccount knative-eventing-operator -n knative-eventing