Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked.

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked.

WANG, YAN-HONG
Hi

I meet a error message while I tried "Test Connection"

Error connecting to https://kubernetes.default.svc.cluster.local: Failure executing: GET at: https://kubernetes.default.svc.cluster.local/api/v1/namespaces/build-env/pods. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. User "system:serviceaccount:build-env:default" cannot list pods in the namespace "build-env"...

My environment:
Platform: Ubuntu 16.04
Jenkins: 2.73.1
Jenkins plugin (kubernetes:1.0).
Kuberntes Server: v1.7.7

There are some similar issue could also be found here.

Is there anyone know about this issue?

Thanks very much.

Hong

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked.

Carlos Sanchez
That means you don't have the right RBAC roles setup for the default SA in kubernetes. By default you get no permissions

On Mon, Oct 2, 2017 at 3:38 PM, WANG, YAN-HONG <[hidden email]> wrote:
Hi

I meet a error message while I tried "Test Connection"

Error connecting to https://kubernetes.default.svc.cluster.local: Failure executing: GET at: https://kubernetes.default.svc.cluster.local/api/v1/namespaces/build-env/pods. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. User "system:serviceaccount:build-env:default" cannot list pods in the namespace "build-env"...

My environment:
Platform: Ubuntu 16.04
Jenkins: 2.73.1
Jenkins plugin (kubernetes:1.0).
Kuberntes Server: v1.7.7

There are some similar issue could also be found here.

Is there anyone know about this issue?

Thanks very much.

Hong

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CALHFn6OFo%2BN70TLSPbimkOav1%3D_oExhzLKC0nF_aDwYBPLHDpg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked.

WANG, YAN-HONG
Hi Carlos,

Thanks for your valuable hint.
That's worked on Ubuntu 16.04 environment since I added RBAC roles setup.

Something interesting is that before I always run in Minikube environment without RBAC role, that still can run.

Thanks anyway.

Hong

Am Dienstag, 3. Oktober 2017 12:15:11 UTC+2 schrieb Carlos Sanchez:
That means you don't have the right RBAC roles setup for the default SA in kubernetes. By default you get no permissions

On Mon, Oct 2, 2017 at 3:38 PM, WANG, YAN-HONG <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="p4ttqS57BAAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">allway...@...> wrote:
Hi

I meet a error message while I tried "Test Connection"

Error connecting to <a href="https://kubernetes.default.svc.cluster.local" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fkubernetes.default.svc.cluster.local\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFxlykxikFK8BLDCLQfuDHhvKDFZA&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fkubernetes.default.svc.cluster.local\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNFxlykxikFK8BLDCLQfuDHhvKDFZA&#39;;return true;">https://kubernetes.default.svc.cluster.local: Failure executing: GET at: <a href="https://kubernetes.default.svc.cluster.local/api/v1/namespaces/build-env/pods" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fkubernetes.default.svc.cluster.local%2Fapi%2Fv1%2Fnamespaces%2Fbuild-env%2Fpods\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEAwAbhAiYaWDFksgClxtRbXqdKUA&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fkubernetes.default.svc.cluster.local%2Fapi%2Fv1%2Fnamespaces%2Fbuild-env%2Fpods\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEAwAbhAiYaWDFksgClxtRbXqdKUA&#39;;return true;">https://kubernetes.default.svc.cluster.local/api/v1/namespaces/build-env/pods. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. User "system:serviceaccount:build-env:default" cannot list pods in the namespace "build-env"...

My environment:
Platform: Ubuntu 16.04
Jenkins: 2.73.1
Jenkins plugin (kubernetes:1.0).
Kuberntes Server: v1.7.7

There are some similar issue could also be found here.
<a href="https://issues.jenkins-ci.org/browse/JENKINS-41388" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fissues.jenkins-ci.org%2Fbrowse%2FJENKINS-41388\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEijSpgD6hzAJ5JBkWAER4olehBPg&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fissues.jenkins-ci.org%2Fbrowse%2FJENKINS-41388\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEijSpgD6hzAJ5JBkWAER4olehBPg&#39;;return true;">https://issues.jenkins-ci.org/browse/JENKINS-41388
<a href="https://groups.google.com/forum/#!topic/fabric8/H-UGSFJLC6g" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/forum/#!topic/fabric8/H-UGSFJLC6g&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/forum/#!topic/fabric8/H-UGSFJLC6g&#39;;return true;">https://groups.google.com/forum/#!topic/fabric8/H-UGSFJLC6g

Is there anyone know about this issue?

Thanks very much.

Hong

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="p4ttqS57BAAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com?utm_medium=email&amp;utm_source=footer" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;">https://groups.google.com/d/msgid/jenkinsci-users/CADLWyO0a2uWcc%3DRZ-u4LfTv5CZ3uG7jam7oQJdb%2BR46MJsUfLQ%40mail.gmail.com.
For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;">https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/2532476a-45ce-466a-8949-a93e7d20e4e9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.