K
Q

Unsupported value: "rbac.authorization.k8s.io"

10/29/2018

When I try to

kubectl create -f cloudflare-argo-rolebinding.yml

this RoleBinding

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: cloudflare-argo-rolebinding
  namespace: default
subjects:
- kind: ServiceAccount
  name: cloudflare-argo
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: Role
  name: cloudflare-argo-role
  apiGroup: rbac.authorization.k8s.io

I get this error :

The RoleBinding "cloudflare-argo-rolebinding" is invalid: subjects[0].apiGroup: Unsupported value: "rbac.authorization.k8s.io": supported values: ""

Any idea ? I'm on DigitalOcean using their new Kubernetes service if it helps.

-- R.Kalbe
kubernetes

Similar Questions

Spring rest template strange behavior in kubernetes
How to have a Kubernetes Pod connect to a destination only reachable by a subset of Nodes?
Jenkinsfile Pipeline: reach ip of sidecar of host
Liveness Probe gets timed
Accessing service from an Alpine-based k8s pod is throwing a DNS Resolution error
kubernetes ingress-controller `400 Bad request - plain HTTP request sent to HTTPS port`
Kubernetes permission setting for accessing resources such as Pod

2 Answers

10/30/2018

I think problem is using wrong apiGroup.

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: cloudflare-argo-rolebinding
  namespace: default
subjects:
- kind: ServiceAccount
  name: cloudflare-argo
  # apiGroup is ""(core/v1) for service_account
  apiGroup: ""
roleRef:
  kind: Role
  name: cloudflare-argo-role
  apiGroup: rbac.authorization.k8s.io
-- Shudipta Sharma
Source: StackOverflow
10/30/2018

ServiceAccount subjects are in the v1 API, which is apiGroup ""

-- Jordan Liggitt
Source: StackOverflow