Page MenuHomePhabricator

Paws-deploy hook failing
Closed, ResolvedPublic


Paws-deploy hook is failing when calling helm with: Error: pods is forbidden: User "system:serviceaccount:prod:default" cannot list pods in the namespace "kube-system".

The same command works from tools-paws-master-01 with my user. My first guess is a mismatched helm version, but I will wait for Horizon to be accessible again to investigate in PAWS-beta.

Event Timeline

Helm in tools-paws-master-01 is::

chicocvenancio@tools-paws-master-01:~/paws$ helm version
Client: &version.Version{SemVer:"v2.7.1", GitCommit:"4aef7fddc8335e0b7b00d9168c04955d903fdbee", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.7.1", GitCommit:"4aef7fddc8335e0b7b00d9168c04955d903fdbee", GitTreeState:"clean"}

While Paws-deploy-hook uses v2.5.1.

Finally tracked this being due to helm attempting to talk directly to k8s with the pod's serviceAccount instead of the Tiller one.
It works again.

Chicocvenancio closed this task as Resolved.May 18 2019, 3:27 PM