Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Basic k8s example doesn't specify RBAC required to use kuberesolver dispatch #499

Closed
jakedt opened this issue Mar 23, 2022 · 1 comment · Fixed by #526
Closed

Basic k8s example doesn't specify RBAC required to use kuberesolver dispatch #499

jakedt opened this issue Mar 23, 2022 · 1 comment · Fixed by #526
Labels
area/docs Affects docs or metadata (e.g. README) hint/good first issue Someone new could handle this priority/3 low This would be nice to have

Comments

@jakedt
Copy link
Member

jakedt commented Mar 23, 2022

Need to add the following:

apiVersion: v1
kind: ServiceAccount
metadata:
  name: spicedb
  namespace: default
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  namespace: default
  name: watch-service
rules:
- apiGroups: [""] # "" indicates the core API group
  resources: ["endpoints"]
  verbs: ["get", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: spicedb-watch-service
  namespace: default
subjects:
- kind: ServiceAccount
  name: spicedb
roleRef:
  kind: Role
  name: watch-service
  apiGroup: rbac.authorization.k8s.io
@jakedt jakedt added area/docs Affects docs or metadata (e.g. README) hint/good first issue Someone new could handle this priority/3 low This would be nice to have labels Mar 23, 2022
@jzelinskie
Copy link
Member

It uses in-memory datastore, so adding the ability to dispatch isn't very useful.

jzelinskie added a commit to jzelinskie/spicedb that referenced this issue Apr 12, 2022
jzelinskie added a commit to jzelinskie/spicedb that referenced this issue Apr 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/docs Affects docs or metadata (e.g. README) hint/good first issue Someone new could handle this priority/3 low This would be nice to have
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants