Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SKS-3173: Add Cluster permissions to clusterRole #47

Merged
merged 1 commit into from
Nov 15, 2024

Conversation

huaqing1994
Copy link
Contributor

ticket

[SKS-3173] [CAPE] cape-controller 和 cape-ip-controller 混用了 RBAC 权限 - Jira
cape-ip 还缺少 Cluster 的权限:

W1114 23:46:53.156341       1 reflector.go:539] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:229: failed to list *v1beta1.Cluster: clusters.cluster.x-k8s.io is forbidden: User "system:serviceaccount:cape-system:cape-ip-controller-manager" cannot list resource "clusters" in API group "cluster.x-k8s.io" at the cluster scope
E1114 23:46:53.156417       1 reflector.go:147] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:229: Failed to watch *v1beta1.Cluster: failed to list *v1beta1.Cluster: clusters.cluster.x-k8s.io is forbidden: User "system:serviceaccount:cape-system:cape-ip-controller-manager" cannot list resource "clusters" in API group "cluster.x-k8s.io" at the cluster scope

changed

添加 Cluster 的获取权限

test

创建使用静态 IP 的虚拟机集群成功

@huaqing1994 huaqing1994 merged commit ecd2f64 into main Nov 15, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants