-
Notifications
You must be signed in to change notification settings - Fork 38
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore: adding troubleshooting guide (#501)
Signed-off-by: Kavindu Dodanduwa <[email protected]>
- Loading branch information
1 parent
1620a08
commit 0befb8f
Showing
2 changed files
with
31 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,26 @@ | ||
# Troubleshooting | ||
|
||
This section contain some common issues you can face while installing, operating the operator and possible solutions for them. | ||
|
||
## Service account and custom resource access errors | ||
|
||
When using `kubernetes` flag sync method, operator rely on K8s RBAC to grant injected flagd access to custom resources. | ||
If your K8s cluster has permission restrictions or if you have cluster configurations as code which can override `ClusterRoleBinding` with a new rollout, then there can be operator errors. | ||
|
||
For example, if you see error such as, | ||
|
||
```sh | ||
Error creating: admission webhook <WEBHOOK_NAME> denied the request: ServiceAccount <NAME> not found | ||
``` | ||
|
||
```sh | ||
User <SERVICE_ACCOUNT> cannot get resource <FLAG_CONFIGURATION_CR> in API group "core.openfeature.dev" in the namespace <NAMESPACE> | ||
``` | ||
|
||
then, please check if you have correct `ClusterRoleBinding` configuration under `open-feature-operator-flagd-kubernetes-sync`. | ||
|
||
> kubectl describe ClusterRoleBinding open-feature-operator-flagd-kubernetes-sync | ||
And you must see your workload namespace listed there, | ||
|
||
>ServiceAccount default <NAMESPACE> |