Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dron runner SA lacks required credentials #60

Open
kamilgregorczyk opened this issue May 8, 2022 · 4 comments
Open

dron runner SA lacks required credentials #60

kamilgregorczyk opened this issue May 8, 2022 · 4 comments
Labels
bug Something isn't working

Comments

@kamilgregorczyk
Copy link

kamilgregorczyk commented May 8, 2022

after installing drone runners by

helm upgrade drone-runner drone/drone-runner-kube --install --create-namespace --namespace drone --values runner.yaml

with values:

replicaCount: 2
env:
  DRONE_RPC_SECRET: aaaa
  DRONE_NAMESPACE_DEFAULT: drone

I'm getting

default: secrets is forbidden: User "system:serviceaccount:drone:drone-runner-drone-runner-kube" cannot create resource "secrets" in API group "" in the namespace "drone"

when running a pipeline

@jimsheldon jimsheldon added the bug Something isn't working label May 11, 2022
@jimsheldon
Copy link
Contributor

Thank you for reporting this, what version of the kube runner helm chart are you using? Thanks

@kamilgregorczyk
Copy link
Author

I stopped using drone but it was the latest one from the day this bug was reported

@loeffel-io
Copy link
Contributor

Same here (!)

current version

@loeffel-io
Copy link
Contributor

workaround (like mentioned in the values: https://github.com/drone/charts/blob/master/charts/drone-runner-kube/values.yaml#L95):

resource "helm_release" "drone-runner-kube" {
  ...
  set {
    name  = "env.DRONE_NAMESPACE_DEFAULT"
    value = "drone"
  }

  set {
    name  = "rbac.buildNamespaces"
    value = "{drone}"
  }
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants