ContainerSolutions / ContainerSolutions/registry-tooling

reg-tool.sh doesn't seem to handle RBAC

Open
#13 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
70
Forks
17
PR merge metrics
No merged PRs in 30d

Description

I'm getting these errors in the create-certs pod:

```
╰ 21:44:49 $ kubectl logs create-certs-f24ng
Error from server (Forbidden): secrets "registry-cert" is forbidden: User "system:serviceaccount:default:default" cannot delete resource "secrets" in API group "" in the namespace "default"
Error from server (Forbidden): secrets "registry-cert" is forbidden: User "system:serviceaccount:default:default" cannot delete resource "secrets" in API group "" in the namespace "kube-system"
Error from server (Forbidden): secrets "registry-key" is forbidden: User "system:serviceaccount:default:default" cannot delete resource "secrets" in API group "" in the namespace "kube-system"
Generating a 4096 bit RSA private key
.................................................................................++
..............................................................................................................................................++
writing new private key to 'certs/domain.key'
-----
Error from server (Forbidden): secrets is forbidden: User "system:serviceaccount:default:default" cannot create resource "secrets" in API group "" in the namespace "default"
```

I don't see any mention of "rbac" in the script, so I'm guessing it was written before RBAC was a thing.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.