You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@rocketmq.apache.org by GitBox <gi...@apache.org> on 2022/07/12 08:51:02 UTC

[GitHub] [rocketmq-operator] feiyuyitiao opened a new issue, #113: :rocketmq-operator" cannot get resource "leases

feiyuyitiao opened a new issue, #113:
URL: https://github.com/apache/rocketmq-operator/issues/113

   after `make deploy`
   
   check operator log,  which prints: 
   ```
   E0712 08:48:26.825666       1 leaderelection.go:330] error retrieving resource lock default/2516c052.apache.org: leases.coordination.k8s.io "2516c052.apache.org" is forbidden: User "system:serviceaccount:default:rocketmq-operator" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "default"
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@rocketmq.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [rocketmq-operator] feiyuyitiao commented on issue #113: :rocketmq-operator" cannot get resource "leases

Posted by GitBox <gi...@apache.org>.
feiyuyitiao commented on issue #113:
URL: https://github.com/apache/rocketmq-operator/issues/113#issuecomment-1181619222

   fix by add 'ClusterRole' leases.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [rocketmq-operator] feiyuyitiao closed issue #113: :rocketmq-operator" cannot get resource "leases

Posted by GitBox <gi...@apache.org>.
feiyuyitiao closed issue #113: :rocketmq-operator" cannot get resource "leases
URL: https://github.com/apache/rocketmq-operator/issues/113


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] :rocketmq-operator" cannot get resource "leases [rocketmq-operator]

Posted by "RockteMQ-AI (via GitHub)" <gi...@apache.org>.
RockteMQ-AI commented on issue #113:
URL: https://github.com/apache/rocketmq-operator/issues/113#issuecomment-5259916166

   **Issue Evaluation**
   
   Category: `question` | Status: **Answered**
   
   This is an RBAC permission issue. The operator needs access to `leases` resources for leader election, but the `ClusterRole` does not include this permission.
   
   **Fix:** Add the following to your `role.yaml`:
   ```yaml
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
     verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
   ```
   
   Then re-apply the role and role binding.
   
   ---
   *Automated evaluation by github-manager*


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [rocketmq-operator] feiyuyitiao commented on issue #113: :rocketmq-operator" cannot get resource "leases

Posted by GitBox <gi...@apache.org>.
feiyuyitiao commented on issue #113:
URL: https://github.com/apache/rocketmq-operator/issues/113#issuecomment-1181618921

   fix by add 'ClusterRole'  leases.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [rocketmq-operator] feiyuyitiao commented on issue #113: :rocketmq-operator" cannot get resource "leases

Posted by GitBox <gi...@apache.org>.
feiyuyitiao commented on issue #113:
URL: https://github.com/apache/rocketmq-operator/issues/113#issuecomment-1181619571

   fix by add 'ClusterRole' leases.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org