Comments (5)
I tried and the result was the same
I got the same results on kubernetes 1.16 and 1.14
I'll wait for the next version
from kubenurse.
Can you please try v1.3.4
: https://github.com/postfinance/kubenurse/releases/tag/v1.3.4
Also using the new example RBACs
from kubenurse.
Hi @guleng
Thanks for this bug report. We implemented a nodeCache that watches Nodes
resources and therefore needs additional permissions to access them. This is done in order to filter out neighboring kubenurses on nodes that are unschedulable.
I will implement a flag to disable this (new) feature and provide an updated RBAC definition
from kubenurse.
Can you try it with the following additional RBAC resources?
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: kubenurse-node-watcher
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get", "watch", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: nurse-node-watcher
namespace: kube-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: kubenurse-node-watcher
subjects:
- kind: ServiceAccount
name: nurse
namespace: kube-system
I'm just preparing/testing cd9ac29 which will allow to disable node resource access.
from kubenurse.
Ok, next week the new version should be out.
I just saw a mistake in the snipped I provided. It should be like this sample below.
Together with the new release, there will be automated CI testing using the provided examples so we can spot such issues earlier.
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: kubenurse-node-watcher
rules:
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get", "watch", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: nurse-node-watcher
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: kubenurse
subjects:
- kind: ServiceAccount
name: nurse
namespace: kube-system
from kubenurse.
Related Issues (20)
- Cache /alive results HOT 1
- exclude neighbourhood pods from Nodes where scheduling is disabled HOT 3
- CI: Create CI test with kind HOT 1
- goreleaser & github actions for releases
- failed request for me_ingress with Get "<INGRESS_URL>/alwayshappy": unsupported protocol scheme "" HOT 2
- Question: How to contribute? HOT 5
- CI Test fails on ingress deployment
- "Moved Permanently" response from /alive endpoint. HOT 1
- Request: Create a gh-pages branch HOT 2
- 404 Not Found service endpoints HOT 9
- Grafana Dashboard HOT 7
- Failed request for me_ingress HOT 6
- Proposal: Use httptrace to get advanced metrics and error messages HOT 1
- Autocreate helm chart index
- Optimisation for Neighbourhood discovery on scale HOT 14
- Monitor external endpoints HOT 12
- should this be `Before`
- WIP: Proposal: Check cluster health with mutations to the state HOT 2
- Kubenurse shold not try to bind pvc on startup HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kubenurse.