{"action":"opened","issue":{"url":"https://api.github.com/repos/Praqma/helmsman/issues/125","repository_url":"https://api.github.com/repos/Praqma/helmsman","labels_url":"https://api.github.com/repos/Praqma/helmsman/issues/125/labels{/name}","comments_url":"https://api.github.com/repos/Praqma/helmsman/issues/125/comments","events_url":"https://api.github.com/repos/Praqma/helmsman/issues/125/events","html_url":"https://github.com/Praqma/helmsman/issues/125","id":378422134,"node_id":"MDU6SXNzdWUzNzg0MjIxMzQ=","number":125,"title":"Tiller service accounts are not created as expected","user":{"login":"ironhalo","id":16613474,"node_id":"MDQ6VXNlcjE2NjEzNDc0","avatar_url":"https://avatars0.githubusercontent.com/u/16613474?v=4","gravatar_id":"","url":"https://api.github.com/users/ironhalo","html_url":"https://github.com/ironhalo","followers_url":"https://api.github.com/users/ironhalo/followers","following_url":"https://api.github.com/users/ironhalo/following{/other_user}","gists_url":"https://api.github.com/users/ironhalo/gists{/gist_id}","starred_url":"https://api.github.com/users/ironhalo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ironhalo/subscriptions","organizations_url":"https://api.github.com/users/ironhalo/orgs","repos_url":"https://api.github.com/users/ironhalo/repos","events_url":"https://api.github.com/users/ironhalo/events{/privacy}","received_events_url":"https://api.github.com/users/ironhalo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-07T18:51:42Z","updated_at":"2018-11-07T18:51:42Z","closed_at":null,"author_association":"NONE","body":"Helmsman doesn't create tiller service accounts:\r\n```yaml\r\n---\r\nmetadata:\r\n  mcs: \"REDACTED\"\r\n  maintainer: \"REDACTED\"\r\n\r\nsettings:\r\n  storageBackend: \"secret\"\r\n  kubeContext: \"REDACTED\"\r\n\r\nnamespaces:\r\n  kube-system:\r\n    installTiller: true\r\n  dev:\r\n    installTiller: true\r\n\r\nhelmRepos:\r\n  stable: \"https://kubernetes-charts.storage.googleapis.com\"\r\n\r\napps:\r\n  metrics-server:\r\n    name: \"metrics-server\"\r\n    description: \"metrics-server\"\r\n    namespace: \"kube-system\"\r\n    enabled: true\r\n    chart: \"stable/metrics-server\"\r\n    version: \"2.0.3\"\r\n    valuesFile: \".values.yaml\"\r\n    purge: false\r\n    test: false\r\n    protected: false\r\n    wait: true\r\n```\r\n\r\n```\r\nhelmsman --apply --debug --verbose -f dsf.yaml\r\n _          _\r\n| |        | |\r\n| |__   ___| |_ __ ___  ___ _ __ ___   __ _ _ __\r\n| '_ \\ / _ \\ | '_ ` _ \\/ __| '_ ` _ \\ / _` | '_ \\\r\n| | | |  __/ | | | | | \\__ \\ | | | | | (_| | | | |\r\n|_| |_|\\___|_|_| |_| |_|___/_| |_| |_|\\__,_|_| |_| version: v1.7.0\r\nA Helm-Charts-as-Code tool.\r\n\r\n\r\n2018/11/07 11:45:46 INFO: checking Helm version\r\n2018/11/07 11:45:47 INFO: checking kubectl version\r\n2018/11/07 11:45:47 VERBOSE: kubectl client version: v1.12.2\r\n2018/11/07 11:45:47 VERBOSE: Helm client version: v2.11.0+g2e55dbe\r\n2018/11/07 11:45:47 INFO: validating that kubectl is installed.\r\n2018/11/07 11:45:47 INFO: validating that helm is installed.\r\n2018/11/07 11:45:47 INFO: validating that diff is installed.\r\n2018/11/07 11:45:47 INFO: Parsed YAML [[ dsf.yaml ]] successfully and found [ 1 ] apps.\r\n2018/11/07 11:45:47 INFO: namespace validation -- Tiller is desired to be deployed WITHOUT TLS in namespace [ kube-system ].\r\n2018/11/07 11:45:47 INFO: namespace validation -- Tiller is desired to be deployed WITHOUT TLS in namespace [ dev ].\r\n2018/11/07 11:45:47 INFO: setting kubectl context to [ REDACTED ]\r\n2018/11/07 11:45:47 VERBOSE: kubectl config use-context REDACTED\r\n2018/11/07 11:45:47 INFO: creating namespace  kube-system\r\n2018/11/07 11:45:47 VERBOSE: kubectl create namespace kube-system\r\n2018/11/07 11:45:47 WARN: I could not create namespace [ kube-system ]. It already exists. I am skipping this.\r\n2018/11/07 11:45:47 INFO: creating namespace  dev\r\n2018/11/07 11:45:47 VERBOSE: kubectl create namespace dev\r\n2018/11/07 11:45:48 INFO: deploying Tiller in namespace [ kube-system ].\r\n2018/11/07 11:45:48 INFO: initializing helm on the current context and upgrading Tiller on namespace [ kube-system ].\r\n2018/11/07 11:45:48 VERBOSE: helm init --upgrade  --tiller-namespace kube-system --override 'spec.template.spec.containers[0].command'='{/tiller,--storage=secret}'\r\n2018/11/07 11:45:48 INFO: deploying Tiller in namespace [ dev ].\r\n2018/11/07 11:45:48 INFO: initializing helm on the current context and upgrading Tiller on namespace [ dev ].\r\n2018/11/07 11:45:48 VERBOSE: helm init --upgrade  --tiller-namespace dev --override 'spec.template.spec.containers[0].command'='{/tiller,--storage=secret}'\r\n2018/11/07 11:45:49 INFO: checking if helm Tiller is ready in namespace [ kube-system ].\r\n2018/11/07 11:45:49 VERBOSE: helm list --tiller-namespace kube-system\r\n2018/11/07 11:45:49 INFO: waiting for helm Tiller to be ready in namespace [kube-system] ...\r\n2018/11/07 11:45:54 INFO: checking if helm Tiller is ready in namespace [ kube-system ].\r\n2018/11/07 11:45:54 VERBOSE: helm list --tiller-namespace kube-system\r\n2018/11/07 11:45:55 INFO: waiting for helm Tiller to be ready in namespace [kube-system] ...\r\n2018/11/07 11:46:00 INFO: checking if helm Tiller is ready in namespace [ kube-system ].\r\n2018/11/07 11:46:00 VERBOSE: helm list --tiller-namespace kube-system\r\n2018/11/07 11:46:00 ERROR: while waiting for helm Tiller to be ready in namespace [ kube-system ] : Error: secrets is forbidden: User \"system:serviceaccount:kube-system:default\" cannot list secrets in the namespace \"kube-system\"\r\n```"}}
{"actor":{"display_login":"ironhalo"}}