Skip to content

Bookinfo demo does not work in RBAC-enabled cluster #166

@lookuptable

Description

@lookuptable

This seems to be due to that the service account of productpage does not required permission to list the ingress extensions:

I0428 19:06:15.787751       1 queue.go:97] Work item failed (Waiting till full synchronization), repeating after delay 1s
E0428 19:06:16.721977       1 reflector.go:201] /home/jenkins/.cache/bazel/_bazel_jenkins/28b2a0a5386b3ff3ee1362d0e46f06af/bazel-sandbox/d8b6f713-567c-42bd-8aed-e92338e5c215-392/execroot/manager/bazel-out/local-fastbuild/bin/external/io_k8s_client_go/tools/cache/go_default_library.a.dir/k8s.io/client-go/external/io_k8s_client_go/tools/cache/reflector.go:96: Failed to list *v1beta1.Ingress: User "system:serviceaccount:default:default" cannot list ingresses.extensions in the namespace "default".: "Unknown user \"system:serviceaccount:default:default\"" (get ingresses.extensions)
I0428 19:06:16.787957       1 queue.go:97] Work item failed (Waiting till full synchronization), repeating after delay 1s
E0428 19:06:17.724059       1 reflector.go:201] /home/jenkins/.cache/bazel/_bazel_jenkins/28b2a0a5386b3ff3ee1362d0e46f06af/bazel-sandbox/d8b6f713-567c-42bd-8aed-e92338e5c215-392/execroot/manager/bazel-out/local-fastbuild/bin/external/io_k8s_client_go/tools/cache/go_default_library.a.dir/k8s.io/client-go/external/io_k8s_client_go/tools/cache/reflector.go:96: Failed to list *v1beta1.Ingress: User "system:serviceaccount:default:default" cannot list ingresses.extensions in the namespace "default".: "Unknown user \"system:serviceaccount:default:default\"" (get ingresses.extensions)
I0428 19:06:17.788290       1 queue.go:97] Work item failed (Waiting till full synchronization), repeating after delay 1s
E0428 19:06:18.726011       1 reflector.go:201] /home/jenkins/.cache/bazel/_bazel_jenkins/28b2a0a5386b3ff3ee1362d0e46f06af/bazel-sandbox/d8b6f713-567c-42bd-8aed-e92338e5c215-392/execroot/manager/bazel-out/local-fastbuild/bin/external/io_k8s_client_go/tools/cache/go_default_library.a.dir/k8s.io/client-go/external/io_k8s_client_go/tools/cache/reflector.go:96: Failed to list *v1beta1.Ingress: User "system:serviceaccount:default:default" cannot list ingresses.extensions in the namespace "default".: "Unknown user \"system:serviceaccount:default:default\"" (get ingresses.extensions)

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions