search

redhat-cop / must-gather-operator

An operator to simplify the creation and upload of cluster diagnostics from the must-gather tool
Apache License 2.0
10 stars 15 forks source link

When defining a custom SA, must-gather is not working #54

Open linus78 opened 4 months ago

linus78 commented 4 months ago

I defined in the MustGather a custom service account:

  serviceAccountRef:
    name: must-gather-sa

This SA is cluster-admin.

Nevertheless must-gather fails, because daemonset/perf-node-gather-daemonset is created WITHOUT 

spec: 
  serviceAccountName: must-gather-sa

and therefore the SA default is used, which has no cluster-admin rights and therefore it fails.

That's why the MustGather serviceAccountRef feature is broken and must-gather-operator can only be used with default SA.