search

triggermesh / charts

Charts for TriggerMesh Deployments
Apache License 2.0
3 stars 6 forks source link

triggermesh: missing clusterrole permissions #169

Closed davidkarlsen closed 2 years ago

davidkarlsen commented 2 years ago

Running 0.5.2 I get:

17-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:56:26.020935       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.GoogleCloudPubSubTarget: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:56:27.642756       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:56:27.642783       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.AzureSentinelTarget: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:56:30.051743       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
E0816 10:56:30.051767       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaSource: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
W0816 10:56:39.570406       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:56:39.570440       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaTarget: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:56:46.145888       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:56:46.146071       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.GoogleCloudPubSubTarget: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:56:47.978727       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:56:47.978753       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.AzureSentinelTarget: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:56:48.124328       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
E0816 10:56:48.124354       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaSource: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
W0816 10:57:19.318363       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:57:19.318388       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaTarget: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:57:24.333727       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:57:24.333759       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.GoogleCloudPubSubTarget: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:57:34.136555       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
E0816 10:57:34.136578       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaSource: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
W0816 10:57:38.104449       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:57:38.104479       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.AzureSentinelTarget: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:57:52.541942       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:57:52.541975       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaTarget: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:58:12.019122       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:58:12.019159       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.AzureSentinelTarget: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:58:15.935878       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
E0816 10:58:15.935902       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaSource: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
W0816 10:58:17.827191       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:58:17.827217       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.GoogleCloudPubSubTarget: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:58:28.244603       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:58:28.244631       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaTarget: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:58:50.780708       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:58:50.780741       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.GoogleCloudPubSubTarget: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:59:04.215836       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:59:04.215960       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.AzureSentinelTarget: failed to list *v1alpha1.AzureSentinelTarget: azuresentineltargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "azuresentineltargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:59:05.565078       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
E0816 10:59:05.565110       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaSource: failed to list *v1alpha1.KafkaSource: kafkasources.sources.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkasources" in API group "sources.triggermesh.io" at the cluster scope
W0816 10:59:13.857656       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:59:13.857680       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.KafkaTarget: failed to list *v1alpha1.KafkaTarget: kafkatargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "kafkatargets" in API group "targets.triggermesh.io" at the cluster scope
W0816 10:59:23.775410       1 reflector.go:324] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope
E0816 10:59:23.775432       1 reflector.go:138] k8s.io/client-go@v11.0.1-0.20190805182717-6502b5e7b1b5+incompatible/tools/cache/reflector.go:167: Failed to watch *v1alpha1.GoogleCloudPubSubTarget: failed to list *v1alpha1.GoogleCloudPubSubTarget: googlecloudpubsubtargets.targets.triggermesh.io is forbidden: User "system:serviceaccount:triggermesh:triggermesh-controller" cannot list resource "googlecloudpubsubtargets" in API group "targets.triggermesh.io" at the cluster scope

maybe it's more safe to just use a wildcard on the resources in order to make sure they are included?