-
Notifications
You must be signed in to change notification settings - Fork 17
stream deploy : Message: Forbidden! User admin doesn't have permission #12
Comments
@tajdars I've spun up an OpenShift Origin 1.4.1 instance (with Since the 1.1.0 release, the preferred way to deploy the OpenShift server is using the provided Templates (the post was written quite a while before the 1.1.0 release and so is most probably out of date with regards to deploying into an OpenShift environment - have added note). Can you please follow the "Getting Started" section in the reference documentation and see if that works for you? |
Hi @donovanmuller , Didn't try minishift yet. 2017-02-21 19:01:39.722 WARN 1 --- [ main] i.f.s.cloud.kubernetes.StandardPodUtils : Failed to get pod with name:[scdf-rabbitmq-1-z27n7]. You should look into this if things aren't working as you expect. Are you missing serviceaccount permissions? io.fabric8.kubernetes.client.KubernetesClientException: An error has occurred. |
@tajdars Can you please have a look at #11 as this error was also referenced in that issue. It seems related to the Service Account that the Data Flow Server requires. |
Hi @donovanmuller , Following 3 checks match was pointed out in the other thread #11 1.scdf ServiceAccount has RoleBinding(edit). 2, scdf ServiceAccount is being referenced by the deployment yaml for scdf-rabbitmq 3.There are no kubernetes related params for env: JAVA_OPTS
|
@tajdars what OpenShift project (i.e. the project name) have you deployed the Data Flow server into? If you use the following command, from the reference docs, to grant the $ oc policy add-role-to-user edit system:serviceaccount:scdf:scdf it assumes that the project name is also |
@donovanmuller , yup I used scdf as the project name. |
Hmm, ok, I see what you mean:
The OpenShift deployer uses the fabric8/kubernetes-client to integrate with OpenShift, which is making the call to the OpenShift API's (via okhttp). Given the above, could it be an OpenShift networking/configuration issue? |
@donovanmuller Added the following param to scdf-rabbitmq yaml :
To deploy the spring tick tock (time | log) Thanx a lot for all your help. |
Glad to hear it 👍 |
Version
OpenShift Master:
v1.4.1+3f9807a
Kubernetes Master:
v1.4.0+776c994
spring-cloud-dataflow-server-openshift:
1.1.0.RELEASE
Followed :
https://blog.switchbit.io/spring-cloud-deployer-openshift/
Get the following Exception when deploying http-log stream :
o.s.c.d.s.c.StreamDeploymentController : Exception when deploying the app StreamAppDefinition [streamName=http-log,......
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://host:8443/api/v1/namespaces/default/pods?labelSelector=spring-app-id%3Dhttp-log-log. Message: Forbidden! User admin/host:8443 doesn't have permission..
The text was updated successfully, but these errors were encountered: