Helm install of Kanister can't create events #90
Comments
depohmel
pushed a commit
to kanisterio/charts
that referenced
this issue
Jun 22, 2018
Provides the option to install a profile CR along with the operator the profile CR is installed via a subchart Kanister operator requires access to CRDs and Events. Add this to the cluster-role. Fixes kanisterio/kanister#82 fixes kanisterio/kanister#90
k8s-ci-robot
pushed a commit
to helm/charts
that referenced
this issue
Jul 15, 2018
…#6280) * [stable/kanister-operator] RBAC changes and default profile creation Provides the option to install a profile CR along with the operator the profile CR is installed via a subchart Kanister operator requires access to CRDs and Events. Add this to the cluster-role. Fixes kanisterio/kanister#82 fixes kanisterio/kanister#90 * fixing repo url and version requirement * Fix typo * remove remote chart with local * operator version to 0.10.0 * new lines EOF * Update Chart.yaml
Jnig
pushed a commit
to Jnig/charts
that referenced
this issue
Nov 13, 2018
…helm#6280) * [stable/kanister-operator] RBAC changes and default profile creation Provides the option to install a profile CR along with the operator the profile CR is installed via a subchart Kanister operator requires access to CRDs and Events. Add this to the cluster-role. Fixes kanisterio/kanister#82 fixes kanisterio/kanister#90 * fixing repo url and version requirement * Fix typo * remove remote chart with local * operator version to 0.10.0 * new lines EOF * Update Chart.yaml Signed-off-by: Jakob Niggel <info@jakobniggel.de>
gsemet
pushed a commit
to gsemet/charts
that referenced
this issue
Nov 13, 2018
…helm#6280) * [stable/kanister-operator] RBAC changes and default profile creation Provides the option to install a profile CR along with the operator the profile CR is installed via a subchart Kanister operator requires access to CRDs and Events. Add this to the cluster-role. Fixes kanisterio/kanister#82 fixes kanisterio/kanister#90 * fixing repo url and version requirement * Fix typo * remove remote chart with local * operator version to 0.10.0 * new lines EOF * Update Chart.yaml
|
This was fixed a while back |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The current helm chart for kanister grants the kanister-operater SA permissions in the default
editpermission group which lacks the ability to create events. Giving the SA the defaultadminpermission group would most likely resolve this issue. To accomplish this, the user would have to create a second SA for Tiller which would need at least theadminpermissions. This is required because the kubernetes API prevents privilege escalation and, by default, Tiller runs with thedefaultprivilege group which does not have admin rights. Setting up a new SA for Tiller, binding it to theadminpermission group, and runninghelm init ...should configure the system properly.This example, or any of the following ones should be sufficient to properly configure Tiller.
The text was updated successfully, but these errors were encountered: