new pods do not run due to rbac issues?

[DimGR]

Hello
i have juju core kubernetes running but i can not get any pods to run
this is one error i get :

kubectl logs -n rook-ceph-system rook-ceph-operator-7ddc9c6f8f-jnlkx
2019-01-23 14:14:35.681619 I | rookcmd: starting Rook v0.9.0-79.g1a1ffdd with arguments '/usr/local/bin/rook ceph operator'
2019-01-23 14:14:35.681670 I | rookcmd: flag values: --alsologtostderr=false, --help=false, --log-level=INFO, --log_backtrace_at=:0, --log_dir=, --logtostderr=true, --mon-healthcheck-interval=45s, --mon-out-timeout=5m0s, --stderrthreshold=2, --v=0, --vmodule=
2019-01-23 14:14:35.682476 I | cephcmd: starting operator
2019-01-23 14:14:35.785236 I | op-agent: getting flexvolume dir path from FLEXVOLUME_DIR_PATH env var
2019-01-23 14:14:35.785254 I | op-agent: flexvolume dir path env var FLEXVOLUME_DIR_PATH is not provided. Defaulting to: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/
2019-01-23 14:14:35.785258 I | op-agent: discovered flexvolume dir path from source default. value: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/
2019-01-23 14:14:35.785261 I | op-agent: no agent mount security mode given, defaulting to '%s' modeAny
failed to run operator. Error starting agent daemonset: error starting agent daemonset: failed to create rook-ceph-agent daemon set. DaemonSet.apps "rook-ceph-agent" is invalid: spec.template.spec.containers[0].securityContext.privileged: Forbidden: disallowed by cluster policy

i have done this :

juju config kubernetes-master authorization-mode=RBAC,Node

any tips how to get this to work ?
thanks

[Ian Booth (wallyworld)]

We currently do not support setting up service accounts or rbac (in juju 2.6). This feature is being added to 2.7 and will be available to test via the edge snap in a few weeks.

[Yang Kelvin Liu (kelvin.liu)]

RBAC is now in edge snap.
This should be solved by proper RBAC setup in the charm.