gifted-advantage-40886
06/27/2024, 10:23 PM❯ kubectl describe sa default -n flytesnacks-development
Name: default
Namespace: flytesnacks-development
Labels: <none>
Annotations: <none>
Image pull secrets: <none>
Mountable secrets: <none>
Tokens: <none>
Events: <none>
gifted-advantage-40886
06/27/2024, 10:25 PMkubectl -n flyte edit cm flyte-backend-flyte-binary-config
gifted-advantage-40886
06/27/2024, 10:25 PMaverage-finland-92144
06/27/2024, 10:27 PMannotations:
<http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: "arn:aws:iam::<aws-account-id>:role/flyte-system-role"
average-finland-92144
06/27/2024, 10:27 PMgifted-advantage-40886
06/27/2024, 10:28 PM002_serviceaccount.yaml: |
apiVersion: v1
kind: ServiceAccount
metadata:
name: default
namespace: '{{ namespace }}'
annotations:
<http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: '{{ defaultIamRole }}'
gifted-advantage-40886
06/27/2024, 10:28 PMaverage-finland-92144
06/27/2024, 10:28 PMgifted-advantage-40886
06/27/2024, 10:28 PMgifted-advantage-40886
06/27/2024, 10:28 PMgifted-advantage-40886
06/27/2024, 10:29 PMgifted-advantage-40886
06/27/2024, 10:29 PMgifted-advantage-40886
06/27/2024, 10:29 PMlabels:
hello: world
gifted-advantage-40886
06/27/2024, 10:29 PMgifted-advantage-40886
06/27/2024, 10:30 PMflytesnacks-development
and the SA and let helm re-create them and it still didn't workaverage-finland-92144
06/27/2024, 10:30 PMgifted-advantage-40886
06/27/2024, 10:30 PMgifted-advantage-40886
06/27/2024, 10:30 PMgifted-advantage-40886
06/27/2024, 10:31 PMcluster_resources:
customData:
- production:
- defaultIamRole:
value: YYY
[same for staging and development]
average-finland-92144
06/27/2024, 10:31 PMaverage-finland-92144
06/27/2024, 10:36 PMgifted-advantage-40886
06/27/2024, 10:37 PMgifted-advantage-40886
06/27/2024, 10:37 PMgifted-advantage-40886
06/27/2024, 10:38 PMERROR 2024/06/27 22:36:18 Could not cast sv to map[string]interface{}; key=%!s(MISSING), st=%!v(MISSING), tt=%!v(MISSING), sv=%!v(MISSING), tv=%!v(MISSING) default-for-task-types=[]interface {} map[string]interface {}=[map[container:container] map[container_array:K8S-ARRAY]] map[container:container container_array:k8s-array sidecar:sidecar]=<nil>
gifted-advantage-40886
06/27/2024, 10:38 PMgifted-advantage-40886
06/27/2024, 10:40 PM{"json":{"src":"controller.go:477"},"level":"debug","msg":"successfully read template config file [002_serviceaccount.yaml]","ts":"2024-06-27T22:37:19Z"}
{"json":{"src":"controller.go:329"},"level":"debug","msg":"Attempting to create resource [ServiceAccount] in cluster [] for namespace [flytesnacks-development]","ts":"2024-06-27T22:37:19Z"}
{"json":{"src":"controller.go:396"},"level":"warning","msg":"Failed to create kubernetes object from config template [002_serviceaccount.yaml] for namespace [flytesnacks-development] with err: serviceaccounts is forbidden: User \"system:serviceaccount:flyte:flyte-backend-flyte-binary\" cannot create resource \"serviceaccounts\" in API group \"\" in the namespace \"flytesnacks-development\"","ts":"2024-06-27T22:37:19Z"}
{"json":{"src":"controller.go:602"},"level":"warning","msg":"Failed to create cluster resources for namespace [flytesnacks-development] with err: Failed to create kubernetes object from config template [002_serviceaccount.yaml] for namespace [flytesnacks-development] with err: serviceaccounts is forbidden: User \"system:serviceaccount:flyte:flyte-backend-flyte-binary\" cannot create resource \"serviceaccounts\" in API group \"\" in the namespace \"flytesnacks-development\"","ts":"2024-06-27T22:37:19Z"}
{"json":{"src":"controller.go:611"},"level":"info","msg":"Completed cluster resource creation loop for namespace [flytesnacks-development] with stats: [{Created:0 Updated:0 AlreadyThere:1 Errored:1}]","ts":"2024-06-27T22:37:19Z"}
average-finland-92144
06/27/2024, 10:40 PMgifted-advantage-40886
06/27/2024, 10:42 PMaverage-finland-92144
06/27/2024, 10:43 PMgifted-advantage-40886
06/27/2024, 10:48 PMgifted-advantage-40886
06/27/2024, 10:52 PMaverage-finland-92144
06/27/2024, 10:53 PMgifted-advantage-40886
06/27/2024, 10:54 PM❯ kubectl describe clusterrole flyte-backend-flyte-binary-cluster-role
Name: flyte-backend-flyte-binary-cluster-role
Labels: <http://app.kubernetes.io/instance=flyte-backend|app.kubernetes.io/instance=flyte-backend>
<http://app.kubernetes.io/managed-by=Helm|app.kubernetes.io/managed-by=Helm>
<http://app.kubernetes.io/name=flyte-binary|app.kubernetes.io/name=flyte-binary>
<http://app.kubernetes.io/version=1.16.0|app.kubernetes.io/version=1.16.0>
<http://helm.sh/chart=flyte-binary-v1.12.0|helm.sh/chart=flyte-binary-v1.12.0>
Annotations: <http://meta.helm.sh/release-name|meta.helm.sh/release-name>: flyte-backend
<http://meta.helm.sh/release-namespace|meta.helm.sh/release-namespace>: flyte
PolicyRule:
Resources Non-Resource URLs Resource Names Verbs
--------- ----------------- -------------- -----
<http://flyteworkflows.flyte.lyft.com|flyteworkflows.flyte.lyft.com> [] [] [create delete deletecollection get list patch post update watch]
pods [] [] [create delete get list patch update watch]
events [] [] [create delete patch update]
namespaces [] [] [create get list patch update]
resourcequotas [] [] [create get list patch update]
secrets [] [] [create get list patch update]
<http://mutatingwebhookconfigurations.admissionregistration.k8s.io|mutatingwebhookconfigurations.admissionregistration.k8s.io> [] [] [create get list patch update]
<http://customresourcedefinitions.apiextensions.k8s.io|customresourcedefinitions.apiextensions.k8s.io> [] [] [create get list]
podtemplates [] [] [get list watch]
gifted-advantage-40886
06/27/2024, 11:09 PMkubectl edit clusterrole flyte-backend-flyte-binary-cluster-role
gifted-advantage-40886
06/27/2024, 11:09 PMgifted-advantage-40886
06/27/2024, 11:10 PM- apiGroups:
- ""
resources:
- serviceaccounts
verbs:
- create
- get
- list
- patch
- update
gifted-advantage-40886
06/27/2024, 11:10 PMgifted-advantage-40886
06/27/2024, 11:11 PMkubectl rollout restart deployment flyte-backend-flyte-binary -n flyte
average-finland-92144
06/27/2024, 11:34 PMgifted-advantage-40886
06/28/2024, 3:51 AMaverage-finland-92144
06/28/2024, 5:31 PM