Kubernetes RBAC Settings

Lagom
1

Hello,

I am getting this error on my kubernetes cluster:

2018-06-26T12:18:24.458Z [error] akka.actor.ActorSystemImpl [sourceThread=application-akka.actor.default-dispatcher-21, akkaTimestamp=12:18:24.458UTC, akkaSource=akka.actor.ActorSystemImpl(application), sourceActorSystem=application] - Failed to unmarshal Kubernetes API response status [400 Bad Request]; check RBAC settings
2018-06-26T12:18:24.458Z [warn] akka.management.cluster.bootstrap.internal.BootstrapCoordinator [sourceThread=application-akka.actor.default-dispatcher-21, akkaTimestamp=12:18:24.458UTC, akkaSource=akka.tcp://application@172.30.110.70:10001/system/bootstrapCoordinator, sourceActorSystem=application] - Resolve attempt failed! Cause: spray.json.DeserializationException: Object is missing required member 'items'

I put the this settings to avoid the exception:

echo '
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: pod-reader
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["get", "watch", "list"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: read-pods
subjects:
- kind: User
  name: system:serviceaccount:default:default
roleRef:
  kind: Role
  name: pod-reader
  apiGroup: rbac.authorization.k8s.io
' | kubectl apply -f -

and also this:

kubectl --namespace=kube-system create clusterrolebinding add-on-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:default

But there is no luck. I couldn’t solve the problem.

Any idea?

1 Like
2

Hello again,

As i learned, problem is about https://github.com/akka/akka-management/issues/222 and will be fixed on v0.15.

Temporarily we fixed this issue to downgrade the sbt-reactive-app version from 1.2.2. to 1.0.0

1 Like