Comments (5)
Hi @sebboer,
What KIC version do you use? Can you post your values.yaml
?
The change that adds the RBAC policy rules for this should already be included in kong 2.37.1 cb44830 https://github.com/Kong/charts/blob/kong-2.37.1/charts/kong/templates/_helpers.tpl#L1644-L1661
from charts.
Coming from 2.36.0 I'm using KIC 3.0 that gets updated to 3.1.0 Changelog
values.yaml
admin:
enabled: true
http:
enabled: true
tls:
enabled: false
type: ClusterIP
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
app.kubernetes.io/instance: kong
app.kubernetes.io/name: kong
topologyKey: kubernetes.io/hostname
env:
NGINX_HTTP_CLIENT_MAX_BODY_SIZE: 0
NGINX_HTTP_PROXY_HTTP_VERSION: "1.1"
NGINX_PROXY_CLIENT_MAX_BODY_SIZE: 0
NGINX_PROXY_PROXY_HTTP_VERSION: "1.1"
PROXY_LISTEN: 0.0.0.0:8000, 0.0.0.0:8443 ssl
TRUSTED_IPS: 10.0.0.0/8
database: postgres
ingressController:
enabled: true
ingressClass: my-company-kong
installCRDs: false
watchNamespaces:
- my-company
manager:
enabled: false
nodeSelector:
kubernetes.io/arch: arm64
node.kubernetes.io/role: agent
portal:
enabled: false
serviceMonitor:
enabled: true
namespace: monitoring
from charts.
We didn't account for watchNamespaces
when we updated the policy RBAC rules for KongLicense
s.
#1084 fixes that.
Before next version of the chart gets released you can disable the license controller (if you're not using its functionality .
from charts.
Thank you! The update now works after adding --enable-controller-kong-license=false
.
from charts.
I'm glad that this is solved 👍
In case you'd like to test the proper fix, it will be released in the next version of kong helm chart.
from charts.
Related Issues (20)
- not able to run Kong Gateway Operator (KGO) HOT 6
- Hot reload of mtls cert is broken. KIC can't fetch secret. HOT 1
- Add --konnect-control-plane-id for KIC
- Remove the need to restart to install new plugins (Git sidecar)
- admin API by default listening also on IPv6 not working in IPv4 only GKE cluster HOT 1
- gateway-operator helm bug: no template "kong.renderTpl" HOT 1
- Kong db-less not loading kong.yml when start/restart
- [Kong Ingress Controller Chart] Deploy multiple kong instances and customize the controllerName of GatewayClass. HOT 4
- Disable Kong response headers HOT 2
- `charts/gateway-operator/scripts/update-rbac-resources.sh` doesn't take KGO EE policy rules into account.
- Add support for "relabelings" field in ServiceMonitor
- Routing IBM MQ using Kong Ingress Service
- IngressClass template doesn't respect env vars
- Ingress controller fails to start up after updating from 2.30.0 to 2.39.3 HOT 3
- Enable fine-grained cluster resource scoping for `validations.kong.konghq.com` webhook
- init-migration job not being created for helm upgrade --install command. HOT 1
- Add compatibility configuration for `konnect.runtimeGroupID`
- feat: add affinity and tolerations to kong by gateway-operator HOT 3
- Add support for setting up data plane backup node as part of kong helm chart
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from charts.