You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by GitBox <gi...@apache.org> on 2022/08/15 20:25:37 UTC
[GitHub] [camel-k] claudio4j opened a new pull request, #3547: fix(rbac): missing clusterrolebinding permission
claudio4j opened a new pull request, #3547:
URL: https://github.com/apache/camel-k/pull/3547
When camel-k-operator is installed in global mode, [pkg/install/knative.go](https://github.com/apache/camel-k/blob/2ffdcfab6f8fa4ee90f9581b26ebf7cbe48aa685/pkg/install/knative.go#L82) wants to patch a `ClusterRoleBinding`, but it fails with
```
Cannot bind the Knative addressable resolver aggregated ClusterRole: skipping
Error while binding the Knative Addressable resolver aggregated ClusterRole",
"error":"clusterrolebindings.rbac.authorization.k8s.io \"camel-k-operator-addressable-resolver\" is forbidden: User \"system:serviceaccount:cmiranda-ops:camel-k-operator\" cannot patch resource \"clusterrolebindings\" in API group \"rbac.authorization.k8s.io\" at the cluster scope"}
```
There is a missing permission to patch it.
```
$ k auth can-i -A patch clusterrolebindings.rbac.authorization.k8s.io --as=system:serviceaccount:cmiranda-ops:camel-k-operator
no
```
**Release Note**
```release-note
NONE
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] tadayosi commented on pull request #3547: fix(rbac): missing clusterrolebinding permission
Posted by GitBox <gi...@apache.org>.
tadayosi commented on PR #3547:
URL: https://github.com/apache/camel-k/pull/3547#issuecomment-1219037555
@claudio4j I think there should be an E2E test that captures the failing case so that it won't regress. Is it possible to create one?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] claudio4j commented on pull request #3547: fix(rbac): missing clusterrolebinding permission
Posted by GitBox <gi...@apache.org>.
claudio4j commented on PR #3547:
URL: https://github.com/apache/camel-k/pull/3547#issuecomment-1215754031
@christophd for review
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [camel-k] tadayosi merged pull request #3547: fix(rbac): missing clusterrolebinding permission
Posted by GitBox <gi...@apache.org>.
tadayosi merged PR #3547:
URL: https://github.com/apache/camel-k/pull/3547
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org