pmontagna opened a new issue, #173:
URL: https://github.com/apache/rocketmq-operator/issues/173

   The issue tracker is **ONLY** used for the bug report(feature request need 
to follow [RIP 
process](https://github.com/apache/rocketmq/wiki/RocketMQ-Improvement-Proposal)).
 Keep in mind, please check whether there is an existing same report before you 
raise a new one.
   
   Alternately (especially if your communication is not a bug report), you can 
send mail to our [mailing lists](http://rocketmq.apache.org/about/contact/). We 
welcome any friendly suggestions, bug fixes, collaboration and other 
improvements.
   
   Please ensure that your bug report is clear and that it is complete. 
Otherwise, we may be unable to understand it or to reproduce it, either of 
which would prevent us from fixing the bug. We strongly recommend the 
report(bug report or feature request) could include some hints as the following:
   
   **BUG REPORT**
   
   1. Please describe the issue you observed:
   I am having an issue with leader election concerning the locking of 
configmap resource because of the following error:
   E0824 18:51:10.020084       1 leaderelection.go:330] error retrieving 
resource lock event-mesh/2516c052.apache.org: configmaps 
"[2516c052.apache.org](http://2516c052.apache.org/)" is forbidden: User 
"system:serviceaccount:event-mesh:rocketmq-operator" cannot get resource 
"configmaps" in API group "" in the namespace "event-mesh"
   However when I look at the clusterrole/rocketmq-operator I see that it has 
the correct permissions.  See below:
   Name:         rocketmq-operator
   Labels:       <none>
   Annotations:  <none>
   PolicyRule:
     Resources                                      Non-Resource URLs  Resource 
Names  Verbs
     ---------                                      -----------------  
--------------  -----
     configmaps                                     []                 []       
       [create delete get list patch update watch]
   Forbidden means a serviceaccount permission issue.  Is there a permission I 
am missing?
   
   - What did you expect to see?
   The cluster running:
   - What did you see instead?
   No cluster
   2. Please tell us about your environment:
   6-node kubernetes cluster running on Rancher with enough CPU and Memory to 
run rocketmq-operator and several rocketmq clusters.
   3. Other information (e.g. detailed explanation, logs, related issues, 
suggestions how to fix, etc):
   
   
   
[cluster-create.log](https://github.com/apache/rocketmq-operator/files/12432731/cluster-create.log)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to