Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User "system:serviceaccount:monitoring:kor" cannot list resource "acraccesstokens" in API group #386

Open
Boniker opened this issue Dec 2, 2024 · 2 comments

Comments

@Boniker
Copy link

Boniker commented Dec 2, 2024

Describe the bug
logs from kor-exporter

collecting unused resources
Failed to get Crds: [acraccesstokens.generators.external-secrets.io](http://acraccesstokens.generators.external-secrets.io/) is forbidden: User "system:serviceaccount:monitoring:kor" cannot list resource "acraccesstokens" in API group "[generators.external-secrets.io](http://generators.external-secrets.io/)" at the cluster scope

To Reproduce
You need to have CRDs of external-secrets inside the cluster and integrate kor to k8s cluster as exporter

Expected behavior
info log without error

collecting unused resources

OS version, architecture and kor version
0.1.14

Additional context
It can be fixed in anyway:

  • upgrade the helm chart with possibility to add extra resources in values.yaml file
  • hardcode it here
@yonahd
Copy link
Owner

yonahd commented Dec 3, 2024

Did the ClusterRole apply for you?

- customresourcedefinitions

@Boniker
Copy link
Author

Boniker commented Dec 3, 2024

ClusterRole successfully applied. No errors during helm install.
An issue appears during kor-exporter run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants