Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The role is missing permissions to access the CRD #75

Closed
u8sand opened this issue Mar 13, 2022 · 1 comment
Closed

The role is missing permissions to access the CRD #75

u8sand opened this issue Mar 13, 2022 · 1 comment

Comments

@u8sand
Copy link
Contributor

u8sand commented Mar 13, 2022

Describe the bug
While the ClusterRole is set up properly, the standard Role doesn't have permissions to access the CRD. Thus setting rbac.clusterRole: "false" results in permission errors:

E0313 00:46:07.142403       1 reflector.go:123] pkg/mod/k8s.io/client-go@v0.0.0-20191016111102-bec269661e48/tools/cache/reflector.go:96: Failed to list *v1alpha1.BasicAuth: basicauths.secretgenerator.mittwald.de is forbidden: User "system:serviceaccount:defaultkubernetes-secret-generator" cannot list resource "basicauths" in API group "secretgenerator.mittwald.de" in the namespace "default"

To Reproduce

helm install kubernetes-secret-generator mittwald/kubernetes-secret-generator --set rbac.clusterRole='"false"'

Expected behavior
I expect it to work when clusterRole is not enabled.

Environment:

  • Kubernetes version: 1.22.6
  • kubernetes-secret-generator version: 3.3.4

Additional context
Awesome chart 🥂

@u8sand u8sand added the bug label Mar 13, 2022
u8sand added a commit to u8sand/kubernetes-secret-generator that referenced this issue Mar 28, 2022
u8sand added a commit to u8sand/kubernetes-secret-generator that referenced this issue Mar 28, 2022
@mittwald-machine
Copy link
Collaborator

There has not been any activity to this issue in the last 30 days. It will automatically be closed after 7 more days. Remove the stale label to prevent this.

martin-helmich pushed a commit that referenced this issue Apr 28, 2022
* Apply #59 when rbac.clusterRole is false

* Fixes #75
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants