You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have admin rights restricted to a single namespace in a kubernetes cluster, without the permission to use host-paths. When trying the installation as in https://mage-ai.github.io/helm-charts/, I get the errors below. Why is it required to deal with multiple namespaces, please ? Is there a version of the charts or a way to modify them in order to satisfy these constraints ?
Thanks
helm repo add mageai https://mage-ai.github.io/helm-charts
helm install my-mageai mageai/mageai
Error: INSTALLATION FAILED: 5 errors occurred:
* roles.rbac.authorization.k8s.io "mageai-job-manager" is forbidden: user "system:serviceaccount:projet-outil-ae:vscode-python-515304" (groups=["system:serviceaccounts" "system:serviceaccounts:projet-outil-ae" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:["batch"], Resources:["jobs/status"], Verbs:["create" "delete"]}
{APIGroups:["extensions"], Resources:["jobs"], Verbs:["create" "delete" "get"]}
{APIGroups:["extensions"], Resources:["jobs/status"], Verbs:["create" "delete" "get"]}
* roles.rbac.authorization.k8s.io "mageai-workspace-manager" is forbidden: user "system:serviceaccount:projet-outil-ae:vscode-python-515304" (groups=["system:serviceaccounts" "system:serviceaccounts:projet-outil-ae" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:[""], Resources:["ingresses"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["nodes"], Verbs:["watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["statefulsets"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:[""], Resources:["statefulsets/scale"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["configmaps"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["ingresses"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["nodes"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["persistentvolumeclaims"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["apps"], Resources:["services"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["configmaps"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["nodes"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["persistentvolumeclaims"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["services"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["statefulsets"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
{APIGroups:["networking.k8s.io"], Resources:["statefulsets/scale"], Verbs:["get" "watch" "create" "update" "patch" "delete"]}
* roles.rbac.authorization.k8s.io "mageai-job-manager" not found
* roles.rbac.authorization.k8s.io "mageai-workspace-manager" not found
* admission webhook "validate.kyverno.svc-fail" denied the request:
resource Deployment/projet-outil-ae/mageai was blocked due to the following policies
disallow-host-path:
autogen-host-path: 'validation error: HostPath volumes are forbidden. The field
spec.volumes[*].hostPath must be unset. rule autogen-host-path failed at path
/spec/template/spec/volumes/0/hostPath/'
The text was updated successfully, but these errors were encountered:
Hello,
I have admin rights restricted to a single namespace in a kubernetes cluster, without the permission to use host-paths. When trying the installation as in https://mage-ai.github.io/helm-charts/, I get the errors below. Why is it required to deal with multiple namespaces, please ? Is there a version of the charts or a way to modify them in order to satisfy these constraints ?
Thanks
The text was updated successfully, but these errors were encountered: