search

q-shift / qshift-templates

Backstage templates for the Qshift demo
Apache License 2.0
1 stars 3 forks source link

User "system:serviceaccount:tqvarnst:pipeline" cannot get resource "virtualmachineinstances" in API group "kubevirt.io #15

Closed cmoulliard closed 7 months ago

cmoulliard commented 7 months ago

TODO

Update the ClusterRoleBinding of the sa:pipeline to give it access to kubevirt.io API within the namespace of the application AND NOT as this is the case under qshift-test namespace.

Example

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubevirt.io:view
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: kubevirt.io:view
subjects:
- kind: ServiceAccount
  name: pipeline
  namespace: qshift-test