Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Install mage.ai on a single namespace and without host-path #61

Open
blenzi opened this issue Aug 5, 2024 · 0 comments
Open

Install mage.ai on a single namespace and without host-path #61

blenzi opened this issue Aug 5, 2024 · 0 comments

Comments

@blenzi
Copy link

blenzi commented Aug 5, 2024

Hello,

I have admin rights restricted to a single namespace in a kubernetes cluster, without the permission to use host-paths. When trying the installation as in https://mage-ai.github.io/helm-charts/, I get the errors below. Why is it required to deal with multiple namespaces, please ? Is there a version of the charts or a way to modify them in order to satisfy these constraints ?

Thanks

helm repo add mageai https://mage-ai.github.io/helm-charts
helm install my-mageai mageai/mageai

Error: INSTALLATION FAILED: 5 errors occurred:
	* roles.rbac.authorization.k8s.io "mageai-job-manager" is forbidden: user "system:serviceaccount:projet-outil-ae:vscode-python-515304" (groups=["system:serviceaccounts" "system:serviceaccounts:projet-outil-ae" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:["batch"], Resources:["jobs/status"], Verbs:["create" "delete"]}
{APIGroups:["extensions"], Resources:["jobs"], Verbs:["create" "delete" "get"]}
{APIGroups:["extensions"], Resources:["jobs/status"], Verbs:["create" "delete" "get"]}
	* roles.rbac.authorization.k8s.io "mageai-workspace-manager" is forbidden: user "system:serviceaccount:projet-outil-ae:vscode-python-515304" (groups=["system:serviceaccounts" "system:serviceaccounts:projet-outil-ae" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["ingresses"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["nodes"], Verbs:["watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["statefulsets"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["statefulsets/scale"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["configmaps"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["ingresses"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["nodes"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["persistentvolumeclaims"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["services"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["configmaps"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["nodes"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["persistentvolumeclaims"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["services"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["statefulsets"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["statefulsets/scale"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
	* roles.rbac.authorization.k8s.io "mageai-job-manager" not found
	* roles.rbac.authorization.k8s.io "mageai-workspace-manager" not found
	* admission webhook "validate.kyverno.svc-fail" denied the request: 

resource Deployment/projet-outil-ae/mageai was blocked due to the following policies 

disallow-host-path:
  autogen-host-path: 'validation error: HostPath volumes are forbidden. The field
    spec.volumes[*].hostPath must be unset. rule autogen-host-path failed at path
    /spec/template/spec/volumes/0/hostPath/'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant