sighupio / permission-manager

Permission Manager is a project that brings sanity to Kubernetes RBAC and Users management, Web UI FTW
https://sighup.io/
BSD 3-Clause "New" or "Revised" License
1.3k stars 170 forks source link

Stuck on generating kubeconfig #112

Closed myevit closed 1 year ago

myevit commented 2 years ago

Stuck on generating kubeconfig

image
Scofields commented 2 years ago

me too!

ettoreciarcia commented 2 years ago

I ran into the same problem

loeken commented 1 year ago

I noticed the same behaviour starting with k3s version 1.24. it still works in 1.23 for me, 1.25 also seems affected @myevit @Scofields @ettoreciarcia what version of kubernetes did you try installing it in?

loeken commented 1 year ago

when i create the user ( but not click on display kubeconfig ), it seems to create a permissionmanager user but no service accounts

❯ k get permissionmanagerusers
NAME                            AGE
permissionmanager.user.loeken   33s
❯ k get serviceaccounts --all-namespaces|grep loeken

after i click on view kubeconfig i get this error in the logs:

2022/10/03 10:13:43 timed out waiting for the condition

then the pod seems to crash and restart if i then click on view kubeconfig again i see this error in the logs

2022/10/03 10:17:46 Service Account not created: serviceaccounts "loeken" already exists

which i can confirm has been created:

❯ k get serviceaccounts --all-namespaces|grep loeken
permission-manager   loeken  
dyipon commented 1 year ago

same here with 1.25

loeken commented 1 year ago

Project dead?

gajdosr commented 1 year ago

Same here, figured out that from1.24 the ServiceAccountToken is not generating automatically.

Workaround: --feature-gates=LegacyServiceAccountTokenNoAutoGeneration=false

Howto: https://faun.pub/feature-gates-how-to-enable-kubernetes-alpha-features-fdb38dc3a9aa

thegalah commented 1 year ago

@gajdosr this worked for me

luigibarbato commented 1 year ago

Hello guys! 🙋🏽‍♂️ First of all, thank you for all your contributions and especially for waiting. 😊

The problem you encountered is related to the changes that have occurred on the ServiceAccount since version v1.24: When a ServiceAccount is created, no more Secret is created automatically, which the Permission Manager used to say was a sure thing. Anyway, the problem will be fixed at the merge of the #109