kube monkey permission issue

[prageethw]

Failed to fetch eligible deployments for namespace due to error: deployments.apps is forbidden: User "system:serviceaccount:kube-system:default" cannot list deployments.apps at the cluster scope

[prageethw]

my pr number 109 should have fixed this, just raising for tracking

[asobti]

Does this only happen when using the helm chart for deployment?

[prageethw]

@asobti that's right. i saw it only when used with helm charts, hence I added rbac.yaml to fix the issue...

[prageethw]

closed

[richabhatia20]

@asobti I'm getting this issue when running my k8s cluster on AWS EC2. My app is running in namespace 'dev' and Kube monkey is running in namespace 'kube-system'. The configmap is in kube-system too.

Here's the full error :

Failed to fetch eligible deployments for namespace dev due to error: deployments.apps is forbidden: User "system:serviceaccount:kube-system:default" cannot list deployments.apps in the namespace "dev"

[prageethw]

@richabhatia20 did you use helm to install it?

[richabhatia20]

@prageethw No I just used the docker image

[prageethw]

@richabhatia20
you need to create a service account that has rights to access other namespaces and run monkey with that service account... otherwise, use helm to install as it will do the magic in the background.

[richabhatia20]

@prageethw I did create the service account as suggested on fnproject/fn-helm#21 but it didnt help.

[prageethw]

@richabhatia20

unfortunately, you are not running monkey with RBAC using service account?

##################

Install Tiller

##################

kubectl create
-f https://raw.githubusercontent.com/prageethw/k8s-specs/master/helm/tiller-rbac.yml
--record --save-config

helm init --service-account tiller

kubectl -n kube-system rollout status deploy tiller-deploy

##################

Run monkey

##################

cd kube-monkey

helm install --name my-release helm/kubemonkey

refer to this readme, still pending merge to master but will give a better handle

https://github.com/prageethw/kube-monkey/blob/master/helm/kubemonkey/ReadMe.MD