You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This section contain some common issues you can face while installing, operating the operator and possible solutions for them.
4
+
5
+
## Service account and custom resource access errors
6
+
7
+
When using `kubernetes` flag sync method, operator rely on K8s RBAC to grant injected flagd access to custom resources.
8
+
If your K8s cluster has permission restrictions or if you have cluster configurations as code which can override `ClusterRoleBinding` with a new rollout, then there can be operator errors.
9
+
10
+
For example, if you see error such as,
11
+
12
+
```sh
13
+
Error creating: admission webhook <WEBHOOK_NAME> denied the request: ServiceAccount <NAME> not found
14
+
```
15
+
16
+
```sh
17
+
User <SERVICE_ACCOUNT> cannot get resource <FLAG_CONFIGURATION_CR>in API group "core.openfeature.dev"in the namespace <NAMESPACE>
18
+
```
19
+
20
+
then, please check if you have correct `ClusterRoleBinding` configuration under `open-feature-operator-flagd-kubernetes-sync`.
0 commit comments