From 9dc9109b271cc0dc6cdb5518f324b7a00d8dc13f Mon Sep 17 00:00:00 2001
From: Mark Mandel <markmandel@google.com>
Date: Thu, 19 Jul 2018 15:44:01 -0700
Subject: [PATCH] Missing `watch` permission in rbac for agones-sdk
Getting the following error in the logs.
`{"level":"error","msg":"agones.dev/agones/pkg/client/informers/externalversions/factory.go:74: Failed to watch *v1alpha1.GameServer: unknown (get gameservers.stable.agones.dev)","time":"2018-07-19T21:52:23Z"}`
Needed the `watch` permission to make it go away.
We aren't watching for events right now, so it's just noise,
but it's better with it gone.
---
install/helm/agones/templates/serviceaccounts/sdk.yaml | 2 +-
install/yaml/install.yaml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/install/helm/agones/templates/serviceaccounts/sdk.yaml b/install/helm/agones/templates/serviceaccounts/sdk.yaml
index 20ac6be56..2116c2860 100644
--- a/install/helm/agones/templates/serviceaccounts/sdk.yaml
+++ b/install/helm/agones/templates/serviceaccounts/sdk.yaml
@@ -38,7 +38,7 @@ metadata:
rules:
- apiGroups: ["stable.agones.dev"]
resources: ["gameservers"]
- verbs: ["list", "update"]
+ verbs: ["list", "update", "watch"]
---
{{- range .Values.gameservers.namespaces }}
apiVersion: rbac.authorization.k8s.io/v1
diff --git a/install/yaml/install.yaml b/install/yaml/install.yaml
index 2117489c4..f3c9df7c8 100644
--- a/install/yaml/install.yaml
+++ b/install/yaml/install.yaml
@@ -113,7 +113,7 @@ metadata:
rules:
- apiGroups: ["stable.agones.dev"]
resources: ["gameservers"]
- verbs: ["list", "update"]
+ verbs: ["list", "update", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
--
GitLab