Error in 2.7 while creating cluster role

Bug #1848540 reported by Kenneth Koski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical Juju
Fix Released
High
Yang Kelvin Liu

Bug Description

I'm attempting to create a ClusterRole that mimics the built-in cluster-admin ClusterRole. The rules I'm creating look like this:

rules:
- apiGroups:
  - '*'
  resources:
  - '*'
  verbs:
  - '*'
- nonResourceURLs:
  - '*'
  verbs:
  - '*'

When passing those in to pod spec v2, I get this error message:

creating or updating service account: ClusterRole.rbac.authorization.k8s.io "kubeflow-metacontroller" is invalid: [rules[1].apiGroups: Required value: resource rules must supply at least one api group, rules[1].resources: Required value: resource rules must supply at least one resource]

This is due to the second rule not defining an `apiGroups` attribute. However, creating the ClusterRole myself with those rules with `kubectl apply` works just fine.

Changed in juju:
status: New → Triaged
assignee: nobody → Yang Kelvin Liu (kelvin.liu)
milestone: none → 2.7-beta1
Revision history for this message
Yang Kelvin Liu (kelvin.liu) wrote :

https://github.com/juju/juju/pull/10755 will be landed to 2.7 to fix this.

Changed in juju:
status: Triaged → In Progress
Changed in juju:
status: In Progress → Fix Committed
Ian Booth (wallyworld)
Changed in juju:
importance: Undecided → High
Changed in juju:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.