Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

`tk diff` silently failing when `ks diff` works #59

Closed
tomwilkie opened this issue Aug 23, 2019 · 4 comments · Fixed by #61

Comments

@tomwilkie
Copy link
Member

commented Aug 23, 2019

$ tk diff -v environments/default/hg-free-us-central1.default
Warning: `namespace` is deprecated, use `spec.namespace` instead.
Warning: `server` is deprecated, use `spec.apiServer` instead.
Warning: `team` is deprecated, use `metadata.labels.team` instead.


$ echo $?
16
@issue-label-bot

This comment has been minimized.

Copy link

commented Aug 23, 2019

Issue-Label Bot is automatically applying the label kind/bug to this issue, with a confidence of 0.91. Please mark this comment with 👍 or 👎 to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

@issue-label-bot issue-label-bot bot added the kind/bug label Aug 23, 2019

@tomwilkie

This comment has been minimized.

Copy link
Member Author

commented Aug 23, 2019

This is using the native kubectl diff

@tomwilkie

This comment has been minimized.

Copy link
Member Author

commented Aug 23, 2019

Made tk print the kubectl error:

$ tk diff -v environments/default/hg-free-us-central1.default
Warning: `namespace` is deprecated, use `spec.namespace` instead.
Warning: `server` is deprecated, use `spec.apiServer` instead.
Warning: `team` is deprecated, use `metadata.labels.team` instead.
Error from server (Forbidden): clusterroles.rbac.authorization.k8s.io "prometheus-one" is forbidden: user "tom@grafana.com" (groups=["system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["endpoints"], Verbs:["get" "list" "watch"]}
{APIGroups:[""], Resources:["nodes"], Verbs:["get" "list" "watch"]}
{APIGroups:[""], Resources:["nodes/proxy"], Verbs:["get" "list" "watch"]}
{APIGroups:[""], Resources:["pods"], Verbs:["get" "list" "watch"]}
{APIGroups:[""], Resources:["services"], Verbs:["get" "list" "watch"]}
{NonResourceURLs:["/metrics"], Verbs:["get"]}
  • Interesting that ksonnet works...
  • Also, weird that kubectl diff using 1 for the presence of a diff or an RBAC error.
@tomwilkie

This comment has been minimized.

Copy link
Member Author

commented Aug 23, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant
You can’t perform that action at this time.