Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-1153

Insufficient roles for IOR

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • maistra-1.1.0
    • maistra-1.1.0
    • ior
    • None
    • MAISTRA 1.1.0

      Without additional rules for `ClusterRole` IOR fails, even when deployed to the same namespace as Istio.

      2020-02-05T12:44:46.523995Z    info    Got info from MCP - 1 object(s)
      
      2020-02-05T12:44:46.524083Z    debug    Object 1: Metadata = name:"ike-ior-test/test-gateway" create_time:<seconds:1580906603 > version:"1078371" annotations:<key:"kubectl.kubernetes.io/last-applied-configuration" value:"{\"apiVersion\":\"networking.istio.io/v1alpha3\",\"kind\":\"Gateway\",\"metadata\":{\"annotations\":{},\"creationTimestamp\":null,\"name\":\"test-gateway\",\"namespace\":\"ike-ior-test\"},\"spec\":{\"selector\":{\"istio\":\"ingressgateway\"},\"servers\":[{\"hosts\":[\"*\"],\"port\":{\"name\":\"http\",\"number\":80,\"protocol\":\"HTTP\"}}]}}\n" >  
      2020-02-05T12:44:46.524115Z    debug    Object 1: Gateway = servers:<port:<number:80 protocol:"HTTP" name:"http" > hosts:"*" > selector:<key:"istio" value:"ingressgateway" > 
      
      2020-02-05T12:44:46.524123Z    debug    Creating route for hostname *
      2020-02-05T12:44:46.524130Z    info    Gateway ike-ior-test/test-gateway: Wildcard * is not supported at the moment. Letting OpenShift create the hostname instead.
      2020-02-05T12:44:46.527736Z    error    Error creating a route for host * (gateway ike-ior-test/test-gateway): could not get the list of pods: pods is forbidden: User "system:serviceaccount:istio-system:ior" cannot list resource "pods" in API group "" in the namespace "istio-system"
      2020-02-05T12:44:46.527773Z    debug    Current state: 0 item(ns)
      

              bartosz-1 Bartosz Majsak
              bartosz-1 Bartosz Majsak
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: