-
Notifications
You must be signed in to change notification settings - Fork 31
Open
Description
Hello,
I have admin rights restricted to a single namespace in a kubernetes cluster, without the permission to use host-paths. When trying the installation as in https://mage-ai.github.io/helm-charts/, I get the errors below. Why is it required to deal with multiple namespaces, please ? Is there a version of the charts or a way to modify them in order to satisfy these constraints ?
Thanks
helm repo add mageai https://mage-ai.github.io/helm-charts
helm install my-mageai mageai/mageai
Error: INSTALLATION FAILED: 5 errors occurred:
* roles.rbac.authorization.k8s.io "mageai-job-manager" is forbidden: user "system:serviceaccount:projet-outil-ae:vscode-python-515304" (groups=["system:serviceaccounts" "system:serviceaccounts:projet-outil-ae" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:["batch"], Resources:["jobs/status"], Verbs:["create" "delete"]}
{APIGroups:["extensions"], Resources:["jobs"], Verbs:["create" "delete" "get"]}
{APIGroups:["extensions"], Resources:["jobs/status"], Verbs:["create" "delete" "get"]}
* roles.rbac.authorization.k8s.io "mageai-workspace-manager" is forbidden: user "system:serviceaccount:projet-outil-ae:vscode-python-515304" (groups=["system:serviceaccounts" "system:serviceaccounts:projet-outil-ae" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["ingresses"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["nodes"], Verbs:["watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["statefulsets"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["statefulsets/scale"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["configmaps"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["ingresses"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["nodes"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["persistentvolumeclaims"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["services"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["configmaps"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["nodes"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["persistentvolumeclaims"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["services"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["statefulsets"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["statefulsets/scale"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
* roles.rbac.authorization.k8s.io "mageai-job-manager" not found
* roles.rbac.authorization.k8s.io "mageai-workspace-manager" not found
* admission webhook "validate.kyverno.svc-fail" denied the request:
resource Deployment/projet-outil-ae/mageai was blocked due to the following policies
disallow-host-path:
autogen-host-path: 'validation error: HostPath volumes are forbidden. The field
spec.volumes[*].hostPath must be unset. rule autogen-host-path failed at path
/spec/template/spec/volumes/0/hostPath/'
Metadata
Metadata
Assignees
Labels
No labels