Pods using service account that has no bindings #7933
Replies: 1 comment · 12 replies
-
Isn't something deleting the ClusterRoleBinding in your cluster? |
Beta Was this translation helpful? Give feedback.
All reactions
-
These are the logs from the point reconciliation started on:
|
Beta Was this translation helpful? Give feedback.
All reactions
-
If you would run it for 10 minutes and share the whole log it would be more useful. But you can see this:
|
Beta Was this translation helpful? Give feedback.
All reactions
-
ok I'll try to share more logs. Thanks for your help. |
Beta Was this translation helpful? Give feedback.
All reactions
-
Well, you now know what to look for ... in general, |
Beta Was this translation helpful? Give feedback.
All reactions
-
Putting this here just in case it helps anyone else: @scholzj thanks a lot for pointing me in the right direction. |
Beta Was this translation helpful? Give feedback.
All reactions
-
👍 1
Uh oh!
There was an error while loading. Please reload this page.
-
I'm currently getting this error:
User "system:serviceaccount:kafka:civitas-kafka" cannot get resource "nodes" in API group "" at the cluster scope.
in the kafka pods. After investigating it seems a service account gets created for the cluster, the name of the cluster is "civitas-kafka", thus it creates a service account called "civitas-kafka" to be used by the pods, but this service account has no bindings, hence the permissions errors. This is my cluster definition:
Any ideas?
Beta Was this translation helpful? Give feedback.
All reactions