Added ClusterRole, ClusterRoleBinding and ServiceAccount

upmc-enterprises / registry-creds

Allow for AWS ECR, Google Registry, & Azure Container Registry credentials to be refreshed inside your Kubernetes cluster via ImagePullSecrets

Other

344 stars 124 forks source link

Added ClusterRole, ClusterRoleBinding and ServiceAccount #103

Open Keralin opened 3 years ago

Keralin commented 3 years ago

When you want to test it in a k8s cluster you will need this files, otherwise the app will fail missing permissions

vvavepacket commented 2 years ago

This doesn't fix the issue.

We are still getting

ERROR: logging before flag.Parse: E0702 02:24:33.516348 1 reflector.go:199] github.com/upmc-enterprises/registry-creds/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.Namespace: namespaces is forbidden: User "system:serviceaccount:kube-system:default" cannot list resource "namespaces" in API group "" at the cluster scope

vvavepacket commented 2 years ago

Please modify the deployment.yaml to include the following