Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow metrics-server non-kube-system RBAC (+ClusterRole) deployment #645

Closed
Rotzke opened this issue May 29, 2024 · 1 comment · Fixed by #674
Closed

Allow metrics-server non-kube-system RBAC (+ClusterRole) deployment #645

Rotzke opened this issue May 29, 2024 · 1 comment · Fixed by #674

Comments

@Rotzke
Copy link
Contributor

Rotzke commented May 29, 2024

Hi!

We have a pretty rare case in our company which is still spread across clusters out there. In a situation where you can not deploy to kube-system namespace it is not possible to deploy the chart, because metrics-server needs access to
extension-apiserver-authentication ConfigMap, thus a RoleBinding should be deployed to kube-system in order to achieve this:


A possible solution here would be to add a ClusterRole with same permissions as the extension-apiserver-authentication-reader Role and make it optional if kube-system deployment is not possible. I have already forked the chart and am ready to create a MR if it could be approved. Maybe you have other suggestions, would be really glad to hear them.

Looking forward to hearing from you!

Nils.

@rupertgti
Copy link

rupertgti commented Oct 1, 2024

I look forward to this improvement

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants