CODEWITHSUNDEEP
kubernetes
Philip Kirkbride
Philip Kirkbride

Reputation: 22889

Kubernetes system:serviceaccount can't access service

I'm trying to follow this tutorial to setup an nginx-ingress controller.

It seems it was written before RBAC was fully integrated into k8s. When I get to the final step of running the nginx-controller.yaml I get back an authorization error:

no service with name default/default-http-backend found: services "default-http-backend" is forbidden: User "system:serviceaccount:default:default" cannot get services in the namespace "default"

What do I need to do to make this work with RBAC?

Upvotes: 3

Views: 634

Answers (1)

yomateo
yomateo

Reputation: 2377

That hackernoon post (like most of them) is incorrent. Specifically there are no RBAC objects and the deployment is not assigned a service account (i.e.: serviceAccountName: ).

To ensure that you have the right (or enough) RBAC objects created check out the RBAC-* objects at https://github.com/mateothegreat/k8-byexamples-ingress-controller/tree/master/manifests.

Upvotes: 1

Related Questions