Questions tagged [k8s-rolebinding]
The k8s-rolebinding tag has no usage guidance.
k8s-rolebinding
30
questions
0
votes
0
answers
21
views
kubernetes cronjob error: Saw a job that the controller did not create or forgot
Task:-> Restarting pod automatically at specific time.
cronjob not working fine after manually triger, getting error- like Saw a job that the controller did not create or forgot: vijay-deployment-...
0
votes
0
answers
18
views
How to organize the issuance of rights in Kubernetes IaC?
How to organize the issuance of rights in Kubernetes IaC? I have a cluster with many namespaces, developers only need rights to individual namespaces. I don’t want to do this manually, I believe that ...
- 1
0
votes
0
answers
103
views
Opentelemetry Kubeletstats receiver - Unable to get network stats in Openshift 4
I need help on kubeletstats receiver.
I'm using the below configuration in opentelemetry collector which is running in openshift.
...
image: 'ghcr.io/open-telemetry/opentelemetry-collector-releases/...
- 11
0
votes
1
answer
522
views
How to create kubernetes role for the "deployment" resource?
i am trying to create a namespace role for my kubernetes cluster that will allow my application using the kubernetes sdk to be able to retrieve the deployments via its service account. I am trying to ...
- 1,069
0
votes
0
answers
52
views
RBAC in kubernetes
I am practicing RBAC in Kubernetes on Minikube. I have created a user with an approved certificate. Now, I want to practice roles and role bindings with that user. However, when I try to access ...
0
votes
1
answer
43
views
K8s RBAC authorization functionality
What is rbac.authorization.k8s.io? is that just the api version RBAC uses to work, etc
When you run a RBAC command (for example creating a role), is the request sent to the master server to process ...
- 515
0
votes
1
answer
161
views
what is gotk notation/symbol means in the fluxcd
recently I saw a usage of using flux cd to do deployment in k8s:
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- apiGroup: rbac.authorization.k8s....
- 780
0
votes
1
answer
59
views
Are namespaces are clusterwide objects?
Can I a list all the namespaces using a role and not a clusterrole resource? If yes, can anyone help me with some example
- 35
2
votes
0
answers
269
views
Changing Role permissions for an active (in-use) ServiceAccount in Kubernetes
Suppose a simple RBAC setup in Kubernetes (assuming default namespace for simplicity):
ServiceAccount + Role + RoleBinding
The role has allows to get and list verbs for pods and pods/log
a Pod using ...
- 731
0
votes
1
answer
128
views
What's the story of kubelet's authorization mechanics and unnecessary ClusterRoleBindings?
i try to understand a simple and basic kubeadm init control plane setup.
The kubeconfig file in /etc/kubernetes/kubelet.conf is used by the kubelet process at startup time:
ubuntu@c1:~$ ps -ef | grep ...
- 1
0
votes
1
answer
603
views
Create secret for my service account but the created service account always show me 0 secret associated with it
My NodeJS microservice is deployed to k8s cluster.
I am running this with my local Docker Desktop k8s environment.
I would like this microservice to access the k8s API server. For that, I guess I ...
- 5,901
2
votes
1
answer
1k
views
Getting authorization error after upgrading EKS to version 1.25 (user=kube-apiserver-kubelet-client, verb=get, resource=nodes, subresource=proxy)
All my permissions were working fine before. After upgrading to EKS 1.25, I started getting the error below when doing kubectl logs pod -n namespace
I tried to debug it. I look at the configMap, ...
- 1,001
1
vote
1
answer
793
views
Deploy ServiceAccount, ClusterRole & ClusterRoleBinding failure
My NodeJS microservice is deployed to k8s cluster.
I would like this microservice to access the k8s API server. For that, I guess I need to create a ServiceAccount for it. So I did this:
apiVersion: ...
- 5,901
0
votes
1
answer
438
views
Allow K8s serviceAccount to read clusterroles, problem when trying to deploy ingress-nginx helm chart with jenkins
I'm trying to deploy ingress-nginx helm chart to K8s with Jenkins running in container.
Kubernetes version: 1.25.4 and
Helm chart: https://artifacthub.io/packages/helm/ingress-nginx/ingress-nginx
I ...
- 51
0
votes
1
answer
330
views
In Kubernetes if I create a rolebinding with a serviceaccount subject without namespace defined ¿which sa is used?
I can create a rolebinding like this
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: test
namespace: rolebinding-ns
subjects:
- kind: ServiceAccount
name: default
...
- 1