Skip to content

non-cluster-admin user can't get rayclusters resource #48

@j4ckstraw

Description

@j4ckstraw

I'm a ray developer, we deploy kuberay in kubernetes platform, cluster admin run helm install xxx installed kuberay-operator for us, but we account the follow error:

$ kubectl get rayclusters
Error from server (Forbidden): rayclusters.ray.io is forbidden: User "<user>" cannot list resource "rayclusters" in API group "ray.io" in the namespace "<namespace>"

according to https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles, may helm chart clusterrole need aggregated labels to support this.

metadata:
  labels:
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-view: "true"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions