[jira] [Created] (YUNIKORN-1775) Admission cluster role doesn't have enough permission to run admission

["PoAn Yang (Jira)" <ji...@apache.org>]

PoAn Yang created YUNIKORN-1775:
-----------------------------------

             Summary: Admission cluster role doesn't have enough permission to run admission
                 Key: YUNIKORN-1775
                 URL: https://issues.apache.org/jira/browse/YUNIKORN-1775
             Project: Apache YuniKorn
          Issue Type: Bug
          Components: shim - kubernetes
            Reporter: PoAn Yang
            Assignee: PoAn Yang


Deploy the admission-controller with YAML files in yunikorn-k8shim:

 
{code:java}
kubectl create namespace yunikorn
kubectl apply -f deployments/scheduler/admission-controller-rbac.yaml --namespace yunikorn
kubectl apply -f deployments/scheduler/admission-controller-secrets.yaml --namespace yunikorn
kubectl apply -f deployments/scheduler/admission-controller.yaml --namespace yunikorn{code}
We will get errors in the yunikorn-admission-controller pod.
{code:java}
E0531 12:36:25.095445       1 reflector.go:138] pkg/mod/k8s.io/client-go@v0.23.14/tools/ca
che/reflector.go:167: Failed to watch *v1.Namespace: failed to list *v1.Namespace: namespa
ces is forbidden: User "system:serviceaccount:yunikorn:yunikorn-admission-controller" cann
ot list resource "namespaces" in API group "" at the cluster scope {code}
 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: dev-help@yunikorn.apache.org