Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked.

[WANG, YAN-HONG]

Hi

I meet a error message while I tried "Test Connection"

Error connecting to https://kubernetes.default.svc.cluster.local: Failure executing: GET at: https://kubernetes.default.svc.cluster.local/api/v1/namespaces/build-env/pods. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. User "system:serviceaccount:build-env:default" cannot list pods in the namespace "build-env"...

My environment:

Platform: Ubuntu 16.04

Jenkins: 2.73.1

Jenkins plugin (kubernetes:1.0).

Kuberntes Server: v1.7.7

There are some similar issue could also be found here.

https://issues.jenkins-ci.org/browse/JENKINS-41388

https://groups.google.com/forum/#!topic/fabric8/H-UGSFJLC6g

Is there anyone know about this issue?

Thanks very much.

Hong

[Carlos Sanchez]

That means you don't have the right RBAC roles setup for the default SA in kubernetes. By default you get no permissions

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[YAN-HONG WANG]

Hi Carlos,

Thanks for your valuable hint.
That's worked on Ubuntu 16.04 environment since I added RBAC roles setup.

Something interesting is that before I always run in Minikube environment without RBAC role, that still can run.

Thanks anyway.

Hong

Am Dienstag, 3. Oktober 2017 12:15:11 UTC+2 schrieb Carlos Sanchez:

That means you don't have the right RBAC roles setup for the default SA in kubernetes. By default you get no permissions

On Mon, Oct 2, 2017 at 3:38 PM, WANG, YAN-HONG <allway...@gmail.com> wrote:

Hi

I meet a error message while I tried "Test Connection"

Error connecting to https://kubernetes.default.svc.cluster.local: Failure executing: GET at: https://kubernetes.default.svc.cluster.local/api/v1/namespaces/build-env/pods. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. User "system:serviceaccount:build-env:default" cannot list pods in the namespace "build-env"...

My environment:

Platform: Ubuntu 16.04

Jenkins: 2.73.1

Jenkins plugin (kubernetes:1.0).

Kuberntes Server: v1.7.7

There are some similar issue could also be found here.

https://issues.jenkins-ci.org/browse/JENKINS-41388

https://groups.google.com/forum/#!topic/fabric8/H-UGSFJLC6g

Is there anyone know about this issue?

Thanks very much.

Hong

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.