RBAC Create doesn't set permissions correctly when installing with Helm

vmware-archive / kubewatch

Watch k8s events and trigger Handlers

Apache License 2.0

2.44k stars 442 forks source link

RBAC Create doesn't set permissions correctly when installing with Helm #149

Open richstokes opened 6 years ago

richstokes commented 6 years ago

ERROR: logging before flag.Parse: E1024 09:18:30.740552 1 reflector.go:205] github.com/bitnami-labs/kubewatch/pkg/controller/controller.go:377: Failed to list *v1beta1.Deployment: deployments.apps is forbidden: User "system:serviceaccount:default:quaffing-bumblebee-kubewatch" cannot list deployments.apps at the cluster scope

Even when Helm package installed with --set='rbac.create=true option

mumrau commented 5 years ago

On my side, the rbac is perfectly fine out-of-the-box except for ingresses and secrets. Maybe the serviceaccount of tiller misses some permissions in order to achieve that?

mkmik commented 4 years ago

Helm chart repo is in https://github.com/bitnami/charts/tree/master/bitnami/kubewatch/