Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Helm] ClusterRole is missing job.min.io access #1980

Closed
schnapsidee opened this issue Feb 12, 2024 · 1 comment · Fixed by #1982
Closed

[Helm] ClusterRole is missing job.min.io access #1980

schnapsidee opened this issue Feb 12, 2024 · 1 comment · Fixed by #1982
Assignees

Comments

@schnapsidee
Copy link

The operator ClusterRole is missing access to the new miniojobs CR.

Expected Behavior

The operator serviceAccount should have access to all needed CRs

Current Behavior

operator Logs are being spammed with the following error:
failed to list *v1alpha1.MinIOJob: miniojobs.job.min.io is forbidden: User "system:serviceaccount:minio-operator:minio-operator" cannot list resource "miniojobs" in API group "job.min.io" at the cluster scope

Possible Solution

Add new APIGroup to operator ClusterRole in helm/operator/templates/operator-clusterrole.yaml

  - apiGroups:
      - minio.min.io
      - sts.min.io
      - job.min.io
    resources:
      - "*"
    verbs:
      - "*"

I only installed via Helm, so I'm not sure if other deployment types are affected.

Steps to Reproduce (for bugs)

  1. Install or Update Helm Chart Version 5.0.12
  2. Check Operator Logs
@lipusik
Copy link

lipusik commented Jan 15, 2025

The same problem on version 6.0.4

Logs:

k delete -k "github.com/minio/operator?ref=v6.0.4"
namespace "minio-operator" deleted
customresourcedefinition.apiextensions.k8s.io "policybindings.sts.min.io" deleted
customresourcedefinition.apiextensions.k8s.io "tenants.minio.min.io" deleted
serviceaccount "minio-operator" deleted
clusterrole.rbac.authorization.k8s.io "minio-operator-role" deleted
clusterrolebinding.rbac.authorization.k8s.io "minio-operator-binding" deleted
service "operator" deleted
service "sts" deleted
deployment.apps "minio-operator" deleted
Error from server (NotFound): error when deleting "github.com/minio/operator?ref=v6.0.4": customresourcedefinitions.apiextensions.k8s.io "miniojobs.job.min.io" not found

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants