From 9dc9109b271cc0dc6cdb5518f324b7a00d8dc13f Mon Sep 17 00:00:00 2001 From: Mark Mandel Date: Thu, 19 Jul 2018 15:44:01 -0700 Subject: [PATCH] Missing `watch` permission in rbac for agones-sdk Getting the following error in the logs. `{"level":"error","msg":"agones.dev/agones/pkg/client/informers/externalversions/factory.go:74: Failed to watch *v1alpha1.GameServer: unknown (get gameservers.stable.agones.dev)","time":"2018-07-19T21:52:23Z"}` Needed the `watch` permission to make it go away. We aren't watching for events right now, so it's just noise, but it's better with it gone. --- install/helm/agones/templates/serviceaccounts/sdk.yaml | 2 +- install/yaml/install.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/install/helm/agones/templates/serviceaccounts/sdk.yaml b/install/helm/agones/templates/serviceaccounts/sdk.yaml index 20ac6be56e..2116c28609 100644 --- a/install/helm/agones/templates/serviceaccounts/sdk.yaml +++ b/install/helm/agones/templates/serviceaccounts/sdk.yaml @@ -38,7 +38,7 @@ metadata: rules: - apiGroups: ["stable.agones.dev"] resources: ["gameservers"] - verbs: ["list", "update"] + verbs: ["list", "update", "watch"] --- {{- range .Values.gameservers.namespaces }} apiVersion: rbac.authorization.k8s.io/v1 diff --git a/install/yaml/install.yaml b/install/yaml/install.yaml index 2117489c44..f3c9df7c82 100644 --- a/install/yaml/install.yaml +++ b/install/yaml/install.yaml @@ -113,7 +113,7 @@ metadata: rules: - apiGroups: ["stable.agones.dev"] resources: ["gameservers"] - verbs: ["list", "update"] + verbs: ["list", "update", "watch"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding