Questions tagged [k8s-cluster-role]

23 questions
0
votes
1 answer

Azure Lighthouse delegated subscription's resource AKS cluster access

I have onboarded the customer using Azure Lighthouse and accessed all the Azure services (e.g. AKS cluster) of the delegated subscription but unable to access the cluster resources. The problem is the AKS cluster has roles and role bindings for…
Jitu
  • 1
0
votes
1 answer

Why ClusterRole admin can't modify resource namespace

Clusterrole cluster-admin can modify resource namespace, while admin can't. Why creating namespace needs higher permission?
Mark
  • 101
  • 2
  • 9
0
votes
0 answers

Terraform kubernetes service account and role binding modules not working

I am trying to create a kubernetes service account in a created namespace, which will have a secret and a cluster role binding, however, even though the terraform plan and apply stage shows that is is being created, it isn't, please see below module…
0
votes
1 answer

How to hide a namespace for specific user on kubernetes

I have three namespaces prod dev stage And I have two users prod-user : have full access for "prod" namespaces but have no access for "dev" and "stage" dev-user : have full access for "dev" and "stage" namespaces but don't have access on…
0
votes
1 answer

Cluster Rolebinding not working for GKE Cluster + OIDC settings

I followed all the instructions from here : https://console.cloud.google.com/kubernetes/clusters/details/us-central1-c/myapp/details?project=plenary-axon-332219&pli=1 So far I can log in successfully, but I cannot list any pods. I tried checking…
0
votes
1 answer

Not able to get deployments as ServiceAccount

I'm trying to access deployments in another namespace, and have the following ServiceAccount, ClusterRole, and ClusterRoleBinding apiVersion: v1 kind: ServiceAccount metadata: name: tekton-triggers-example-sa namespace:…
TMH
  • 6,096
  • 7
  • 51
  • 88
0
votes
1 answer

Not able to access resource from kubernates operator

I am getting below error when I try to fetch resource(test-associations) which is created by assocOperator(kubernates operator deployed at stage level) in testns2 namespace from test-operator code (which is kubernates operator deployed at stage…
0
votes
2 answers

how to specify kubernetes RBAC permissions for scaling a specific deployment

I'm trying to give a group of users permission to scale a specific set of deployments in kubernetes 1.20 I've tried using the API reference doc here:…
1
2