You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When deploying the chart with a single namespace watched using the --watch-namespaces flag, the operator complains about missing rights:
E0725 09:28:43.406703 1 reflector.go:140] pkg/mod/k8s.io/client-go@v0.26.3/tools/cache/reflector.go:169: Failed to watch *v1.Role: failed to list *v1.Role: roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:logging:fluent-operator" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "logging"
W0725 09:28:48.261017 1 reflector.go:424] pkg/mod/k8s.io/client-go@v0.26.3/tools/cache/reflector.go:169: failed to list *v1.Role: roles.rbac.authorization.k8s.io is forbidden: User "system:serviceaccount:logging:fluent-operator" cannot list resource "roles" in API group "rbac.authorization.k8s.io" in the namespace "logging"
Describe the issue
This is the same issue than: #646 but for roles.
When deploying the chart with a single namespace watched using the
--watch-namespaces
flag, the operator complains about missing rights:To Reproduce
Expected behavior
The helm chart should have the following rbac rules:
Your Environment
How did you install fluent operator?
See how to reproduce.
Additional context
No response
The text was updated successfully, but these errors were encountered: