Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tutorial fails @ Step 5 due to RBAC issues if you have capital letters in your gcloud account name #282

Closed
CrimsonZen opened this issue Jul 8, 2018 · 1 comment
Labels
kind/bug These are bugs. kind/documentation Documentation for Agones
Milestone

Comments

@CrimsonZen
Copy link

CrimsonZen commented Jul 8, 2018

In the guide at https://github.com/GoogleCloudPlatform/agones/blob/master/install/README.md#setting-up-a-google-kubernetes-engine-gke-cluster, I ran this line to set up RBAC stuff:

kubectl create clusterrolebinding cluster-admin-binding \
  --clusterrole cluster-admin --user `gcloud config get-value account`

Then, I moved onto the kubectl apply step, which failed. Output included this:

...
validatingwebhookconfiguration "agones-validation-webhook" configured
mutatingwebhookconfiguration "agones-mutation-webhook" configured
secret "agones-manual-cert" unchanged
Error from server (Forbidden): error when creating "https://github.com/GoogleCloudPlatform/agones/raw/release-0.2.0/install/yaml/install.yaml": clusterroles.rbac.authorization.k8s.io "agones-controller" is forbidden: attempt to grant extra privileges:
...

Turns out, the gcloud config get-value account substitution in Step 4 will return a lowercase version of your current user, which causes the subsequent kubectl apply step to fail if your "actual username" has uppercase letters in it. (My username is CrimsonZen@, but the substitution offered crimsonzen@.)

This thread helped me diagnose the problem: prometheus-operator/prometheus-operator#357

I'm very much a kubernetes newbie, but I figured I'd call this out as being a potential hazard during setup if you follow the tutorial.

@markmandel
Copy link
Collaborator

Oh that's interesting! Good find!

I bet this means there issues across lots of projects that use this step!

@markmandel markmandel added kind/bug These are bugs. kind/documentation Documentation for Agones labels Jul 15, 2018
markmandel added a commit to markmandel/agones that referenced this issue Oct 11, 2018
markmandel added a commit to markmandel/agones that referenced this issue Oct 11, 2018
markmandel added a commit to markmandel/agones that referenced this issue Oct 11, 2018
markmandel added a commit that referenced this issue Oct 11, 2018
@markmandel markmandel added this to the 0.5.0 milestone Oct 16, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug These are bugs. kind/documentation Documentation for Agones
Projects
None yet
Development

No branches or pull requests

2 participants