Skip to content

Commit

Permalink
Fix kube-dns RBAC issues.
Browse files Browse the repository at this point in the history
Allow kube-dns and other kube-system services full access to the API.
See:
* kubernetes/minikube#1734
* kubernetes/minikube#1722
  • Loading branch information
wallrj committed Nov 8, 2017
1 parent 9376a30 commit 1884ae4
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 20 deletions.
9 changes: 9 additions & 0 deletions hack/install-e2e-dependencies.sh
Original file line number Diff line number Diff line change
Expand Up @@ -37,3 +37,12 @@ if ! retry TIMEOUT=300 kubectl get nodes; then
echo "ERROR: Timeout waiting for Minikube to be ready"
exit 1
fi

# Fix kube-dns RBAC issues.
# Allow kube-dns and other kube-system services full access to the API.
# See:
# * https://github.com/kubernetes/minikube/issues/1734
# * https://github.com/kubernetes/minikube/issues/1722
kubectl create clusterrolebinding cluster-admin:kube-system \
--clusterrole=cluster-admin \
--serviceaccount=kube-system:default
20 changes: 0 additions & 20 deletions hack/prepare-e2e.sh
Original file line number Diff line number Diff line change
Expand Up @@ -11,26 +11,6 @@ apiVersion: v1
kind: List
items:
### Fix kube-dns RBAC issues ###
# Create a ServiceAccount for kube-dns to use
- apiVersion: v1
kind: ServiceAccount
metadata:
name: kube-dns
namespace: kube-system
- apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: system:kube-dns
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:kube-dns
subjects:
- kind: ServiceAccount
name: default
namespace: kube-system
### Tiller ###
# Create a ServiceAccount for tiller to use
- apiVersion: v1
Expand Down

0 comments on commit 1884ae4

Please sign in to comment.