Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rbac issue with latest #91

Closed
cameronbraid opened this issue May 1, 2020 · 6 comments
Closed

rbac issue with latest #91

cameronbraid opened this issue May 1, 2020 · 6 comments

Comments

@cameronbraid
Copy link

minio operator pod reports :

E0501 06:07:52.821618       1 reflector.go:134] k8s.io/client-go@v0.0.0-20181016014101-70926af6e803/tools/cache/reflector.go:95: Failed to list *v1beta1.MinIOInstance: minioinstances.miniocontroller.min.io is forbidden: User "system:serviceaccount:minio:minio-operator-sa" cannot list resource "minioinstances" in API group "miniocontroller.min.io" at the cluster scope

@cameronbraid
Copy link
Author

works if I use https://raw.githubusercontent.com/minio/minio-operator/1.0.9/minio-operator.yaml instead of master

@dvaldivia
Copy link
Collaborator

@cameronbraid you can fix this by adding the following permission to the latest minio-operator-role

- apiGroups:
  - min.io
  resources:
  - "*"
  verbs:
  - "*"

@sunsingerus
Copy link
Contributor

Still facing the same issue:

E0514 17:35:17.291403       1 reflector.go:134] k8s.io/client-go@v0.0.0-20181016014101-70926af6e803/tools/cache/reflector.go:95: Failed to list *v1beta1.MinIOInstance: minioinstances.miniocontroller.min.io is forbidden: User "system:serviceaccount:minio-operator-ns:minio-operator-sa" cannot list resource "minioinstances" in API group "miniocontroller.min.io" at the cluster scope

and above mentioned section

- apiGroups:
  - min.io
  resources:
  - "*"
  verbs:
  - "*"

is in place

@sunsingerus
Copy link
Contributor

by the way, after changing cluster role to cluster-admin

roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin

face the another error:

E0514 17:29:01.120975       1 reflector.go:134] k8s.io/client-go@v0.0.0-20181016014101-70926af6e803/tools/cache/reflector.go:95: Failed to list *v1beta1.MinIOInstance: the server could not find the requested resource (get minioinstances.miniocontroller.min.io)

@nitisht
Copy link
Contributor

nitisht commented May 14, 2020

Can you try with new image minio/k8s-operator:2.0.0 and the default yaml provided?

@nitisht
Copy link
Contributor

nitisht commented May 22, 2020

Please try with the latest set of examples, it should work fine. Closing this issue for now

@nitisht nitisht closed this as completed May 22, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants