installing 0.28.0 and kafka 3.1.0

[sreejesh-radhakrishnan-db]

installing 0.28.0 and kafka 3.1.0

Operator install has been successful. and strimzi-cluster-operator service account does exist, do I need to give any extra permission or some resource access to this SA which I have not done in 0.26 version?

but KAFKA install failed with log in operator complaining about a ServiceAccount

2022-02-23T10:26:26.761350760Zio.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://240.0.9.161/apis/core.strimzi.io/v1beta2/namespaces/gpm-kafka/strimzipodsets/my-cluster-kafka. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. strimzipodsets.core.strimzi.io "my-cluster-kafka" is forbidden: User "system:serviceaccount:gpm-kafka:strimzi-cluster-operator" cannot get resource "strimzipodsets" in API group "core.strimzi.io" in the namespace "gpm-kafka". at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:683) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:662) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:611) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:556) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:519) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:488) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:458) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleGet(BaseOperation.java:698) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.BaseOperation.getMandatory(BaseOperation.java:184) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.BaseOperation.get(BaseOperation.java:151) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.fabric8.kubernetes.client.dsl.base.BaseOperation.get(BaseOperation.java:83) ~[io.fabric8.kubernetes-client-5.12.0.jar:?] at io.strimzi.operator.common.operator.resource.ResourceSupport.lambda$getAsync$2(ResourceSupport.java:251) ~[io.strimzi.operator-common-0.28.0.jar:0.28.0] at io.vertx.core.impl.ContextImpl.lambda$null$0(ContextImpl.java:159) ~[io.vertx.vertx-core-4.2.4.jar:4.2.4] at io.vertx.core.impl.AbstractContext.dispatch(AbstractContext.java:100) ~[io.vertx.vertx-core-4.2.4.jar:4.2.4] at io.vertx.core.impl.ContextImpl.lambda$executeBlocking$1(ContextImpl.java:157) ~[io.vertx.vertx-core-4.2.4.jar:4.2.4] at io.vertx.core.impl.TaskQueue.run(TaskQueue.java:76) ~[io.vertx.vertx-core-4.2.4.jar:4.2.4] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~[?:?] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~[?:?] at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) [io.netty.netty-common-4.1.71.Final.jar:4.1.71.Final] at java.lang.Thread.run(Thread.java:829) [?:?]

[scholzj]

You need to install all the operator files with every release. The resources such as RBAC files or CRDs change and need to be updated.

[sreejesh-radhakrishnan-db]

I have installed all the files which was there in strimzi-kafka-operator-helm-3-chart-0.28.0.tgz is there anything missing in this set?

[scholzj]

Well, you are missing the RBAC rights. So I guess you didn't installed them or you didn't do it right. You should double check your RBAC resources if they are up to date and installed correctly.

[sreejesh-radhakrishnan-db]

thank you . it was installing wrong RBAC as you pointed out.