{"action":"created","comment":{"url":"https://api.github.com/repos/kubeapps/kubeapps/pulls/comments/210094114","pull_request_review_id":146240120,"id":210094114,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIxMDA5NDExNA==","diff_hunk":"@@ -170,3 +170,19 @@ For annotations, please see [this document](https://github.com/kubernetes/ingres\n ##### TLS\n \n TLS can be configured using the `ingress.tls` object in the same format that the Kubernetes Ingress requests. Please see [this example](https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx/examples/tls) for more information.\n+\n+## Troubleshooting\n+\n+### Forbidden error while installing the Chart\n+\n+If during installation you run into an error similar to:\n+\n+```\n+Error: release kubeapps failed: clusterroles.rbac.authorization.k8s.io \"kubeapps-apprepository-controller\" is forbidden: attempt to grant extra privileges: [{[get] [batch] [cronjobs] [] []...\n+```\n+\n+It is possible that your cluster does not have Role Based Access Control (RBAC) fully configured. In which case you should perform the chart installation by setting `rbac.create=false`","path":"chart/kubeapps/README.md","position":15,"original_position":15,"commit_id":"becbcdc5e78f9fd66896d203a9e60555f0a39435","original_commit_id":"becbcdc5e78f9fd66896d203a9e60555f0a39435","user":{"login":"prydonius","id":1544861,"node_id":"MDQ6VXNlcjE1NDQ4NjE=","avatar_url":"https://avatars3.githubusercontent.com/u/1544861?v=4","gravatar_id":"","url":"https://api.github.com/users/prydonius","html_url":"https://github.com/prydonius","followers_url":"https://api.github.com/users/prydonius/followers","following_url":"https://api.github.com/users/prydonius/following{/other_user}","gists_url":"https://api.github.com/users/prydonius/gists{/gist_id}","starred_url":"https://api.github.com/users/prydonius/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/prydonius/subscriptions","organizations_url":"https://api.github.com/users/prydonius/orgs","repos_url":"https://api.github.com/users/prydonius/repos","events_url":"https://api.github.com/users/prydonius/events{/privacy}","received_events_url":"https://api.github.com/users/prydonius/received_events","type":"User","site_admin":false},"body":"let's add a colon at the end of this sentence","created_at":"2018-08-14T20:34:01Z","updated_at":"2018-08-14T20:35:59Z","html_url":"https://github.com/kubeapps/kubeapps/pull/483#discussion_r210094114","pull_request_url":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/kubeapps/kubeapps/pulls/comments/210094114"},"html":{"href":"https://github.com/kubeapps/kubeapps/pull/483#discussion_r210094114"},"pull_request":{"href":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483"}}},"pull_request":{"url":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483","id":208381326,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA4MzgxMzI2","html_url":"https://github.com/kubeapps/kubeapps/pull/483","diff_url":"https://github.com/kubeapps/kubeapps/pull/483.diff","patch_url":"https://github.com/kubeapps/kubeapps/pull/483.patch","issue_url":"https://api.github.com/repos/kubeapps/kubeapps/issues/483","number":483,"state":"open","locked":false,"title":"Chart, support for disabling RBAC","user":{"login":"migmartri","id":24523,"node_id":"MDQ6VXNlcjI0NTIz","avatar_url":"https://avatars2.githubusercontent.com/u/24523?v=4","gravatar_id":"","url":"https://api.github.com/users/migmartri","html_url":"https://github.com/migmartri","followers_url":"https://api.github.com/users/migmartri/followers","following_url":"https://api.github.com/users/migmartri/following{/other_user}","gists_url":"https://api.github.com/users/migmartri/gists{/gist_id}","starred_url":"https://api.github.com/users/migmartri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/migmartri/subscriptions","organizations_url":"https://api.github.com/users/migmartri/orgs","repos_url":"https://api.github.com/users/migmartri/repos","events_url":"https://api.github.com/users/migmartri/events{/privacy}","received_events_url":"https://api.github.com/users/migmartri/received_events","type":"User","site_admin":false},"body":"If you try to install RBAC resources in a cluster that has RBAC disabled from a service account (i.e Tiller serviceaccount) the installation fails with the following error\r\n\r\n```\r\nError: release kubeapps failed: clusterroles.rbac.authorization.k8s.io \"kubeapps-apprepository-controller\" is forbidden: attempt to grant extra privileges: [{[get] [batch] [cronjobs] [] []} {[list] [batch] [cronjobs] [] []} {[watch] [batch] [cronjobs] [] []}] user=&{system:serviceaccount:kube-system:default 63e12d0a-9f47-11e8-bb6c-d6e551b314a5 [system:serviceaccounts system:serviceaccounts:kube-system system:authenticated] map[]} ownerrules=[] ruleResolutionErrors=[]\r\n```\r\n\r\nThis can be prevented by skipping these resources during installation. It seems to be a common pattern in [the upstream charts](https://github.com/helm/charts/search?q=rbac.create&unscoped_q=rbac.create) to have a rbac.create flag in the values.yaml set to true by default. \r\n\r\nFixes https://github.com/kubeapps/kubeapps/issues/480","created_at":"2018-08-14T19:10:36Z","updated_at":"2018-08-14T20:35:59Z","closed_at":null,"merged_at":null,"merge_commit_sha":"cd0b24c12e7d9eb2061bb4b453b0b90b404bb933","assignee":null,"assignees":[],"requested_reviewers":[{"login":"andresmgot","id":4025665,"node_id":"MDQ6VXNlcjQwMjU2NjU=","avatar_url":"https://avatars0.githubusercontent.com/u/4025665?v=4","gravatar_id":"","url":"https://api.github.com/users/andresmgot","html_url":"https://github.com/andresmgot","followers_url":"https://api.github.com/users/andresmgot/followers","following_url":"https://api.github.com/users/andresmgot/following{/other_user}","gists_url":"https://api.github.com/users/andresmgot/gists{/gist_id}","starred_url":"https://api.github.com/users/andresmgot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andresmgot/subscriptions","organizations_url":"https://api.github.com/users/andresmgot/orgs","repos_url":"https://api.github.com/users/andresmgot/repos","events_url":"https://api.github.com/users/andresmgot/events{/privacy}","received_events_url":"https://api.github.com/users/andresmgot/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483/commits","review_comments_url":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483/comments","review_comment_url":"https://api.github.com/repos/kubeapps/kubeapps/pulls/comments{/number}","comments_url":"https://api.github.com/repos/kubeapps/kubeapps/issues/483/comments","statuses_url":"https://api.github.com/repos/kubeapps/kubeapps/statuses/becbcdc5e78f9fd66896d203a9e60555f0a39435","head":{"label":"migmartri:480-chart-rbac","ref":"480-chart-rbac","sha":"becbcdc5e78f9fd66896d203a9e60555f0a39435","user":{"login":"migmartri","id":24523,"node_id":"MDQ6VXNlcjI0NTIz","avatar_url":"https://avatars2.githubusercontent.com/u/24523?v=4","gravatar_id":"","url":"https://api.github.com/users/migmartri","html_url":"https://github.com/migmartri","followers_url":"https://api.github.com/users/migmartri/followers","following_url":"https://api.github.com/users/migmartri/following{/other_user}","gists_url":"https://api.github.com/users/migmartri/gists{/gist_id}","starred_url":"https://api.github.com/users/migmartri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/migmartri/subscriptions","organizations_url":"https://api.github.com/users/migmartri/orgs","repos_url":"https://api.github.com/users/migmartri/repos","events_url":"https://api.github.com/users/migmartri/events{/privacy}","received_events_url":"https://api.github.com/users/migmartri/received_events","type":"User","site_admin":false},"repo":{"id":142933601,"node_id":"MDEwOlJlcG9zaXRvcnkxNDI5MzM2MDE=","name":"kubeapps","full_name":"migmartri/kubeapps","owner":{"login":"migmartri","id":24523,"node_id":"MDQ6VXNlcjI0NTIz","avatar_url":"https://avatars2.githubusercontent.com/u/24523?v=4","gravatar_id":"","url":"https://api.github.com/users/migmartri","html_url":"https://github.com/migmartri","followers_url":"https://api.github.com/users/migmartri/followers","following_url":"https://api.github.com/users/migmartri/following{/other_user}","gists_url":"https://api.github.com/users/migmartri/gists{/gist_id}","starred_url":"https://api.github.com/users/migmartri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/migmartri/subscriptions","organizations_url":"https://api.github.com/users/migmartri/orgs","repos_url":"https://api.github.com/users/migmartri/repos","events_url":"https://api.github.com/users/migmartri/events{/privacy}","received_events_url":"https://api.github.com/users/migmartri/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/migmartri/kubeapps","description":"Super-charge your Kubernetes cluster","fork":true,"url":"https://api.github.com/repos/migmartri/kubeapps","forks_url":"https://api.github.com/repos/migmartri/kubeapps/forks","keys_url":"https://api.github.com/repos/migmartri/kubeapps/keys{/key_id}","collaborators_url":"https://api.github.com/repos/migmartri/kubeapps/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/migmartri/kubeapps/teams","hooks_url":"https://api.github.com/repos/migmartri/kubeapps/hooks","issue_events_url":"https://api.github.com/repos/migmartri/kubeapps/issues/events{/number}","events_url":"https://api.github.com/repos/migmartri/kubeapps/events","assignees_url":"https://api.github.com/repos/migmartri/kubeapps/assignees{/user}","branches_url":"https://api.github.com/repos/migmartri/kubeapps/branches{/branch}","tags_url":"https://api.github.com/repos/migmartri/kubeapps/tags","blobs_url":"https://api.github.com/repos/migmartri/kubeapps/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/migmartri/kubeapps/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/migmartri/kubeapps/git/refs{/sha}","trees_url":"https://api.github.com/repos/migmartri/kubeapps/git/trees{/sha}","statuses_url":"https://api.github.com/repos/migmartri/kubeapps/statuses/{sha}","languages_url":"https://api.github.com/repos/migmartri/kubeapps/languages","stargazers_url":"https://api.github.com/repos/migmartri/kubeapps/stargazers","contributors_url":"https://api.github.com/repos/migmartri/kubeapps/contributors","subscribers_url":"https://api.github.com/repos/migmartri/kubeapps/subscribers","subscription_url":"https://api.github.com/repos/migmartri/kubeapps/subscription","commits_url":"https://api.github.com/repos/migmartri/kubeapps/commits{/sha}","git_commits_url":"https://api.github.com/repos/migmartri/kubeapps/git/commits{/sha}","comments_url":"https://api.github.com/repos/migmartri/kubeapps/comments{/number}","issue_comment_url":"https://api.github.com/repos/migmartri/kubeapps/issues/comments{/number}","contents_url":"https://api.github.com/repos/migmartri/kubeapps/contents/{+path}","compare_url":"https://api.github.com/repos/migmartri/kubeapps/compare/{base}...{head}","merges_url":"https://api.github.com/repos/migmartri/kubeapps/merges","archive_url":"https://api.github.com/repos/migmartri/kubeapps/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/migmartri/kubeapps/downloads","issues_url":"https://api.github.com/repos/migmartri/kubeapps/issues{/number}","pulls_url":"https://api.github.com/repos/migmartri/kubeapps/pulls{/number}","milestones_url":"https://api.github.com/repos/migmartri/kubeapps/milestones{/number}","notifications_url":"https://api.github.com/repos/migmartri/kubeapps/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/migmartri/kubeapps/labels{/name}","releases_url":"https://api.github.com/repos/migmartri/kubeapps/releases{/id}","deployments_url":"https://api.github.com/repos/migmartri/kubeapps/deployments","created_at":"2018-07-30T22:16:38Z","updated_at":"2018-07-30T22:16:41Z","pushed_at":"2018-08-14T20:32:54Z","git_url":"git://github.com/migmartri/kubeapps.git","ssh_url":"git@github.com:migmartri/kubeapps.git","clone_url":"https://github.com/migmartri/kubeapps.git","svn_url":"https://github.com/migmartri/kubeapps","homepage":"https://kubeapps.com","size":37714,"stargazers_count":0,"watchers_count":0,"language":"TypeScript","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"kubeapps:master","ref":"master","sha":"2b4e1aa7c01c149bb5f2032a6460eba457637fe3","user":{"login":"kubeapps","id":32396354,"node_id":"MDEyOk9yZ2FuaXphdGlvbjMyMzk2MzU0","avatar_url":"https://avatars0.githubusercontent.com/u/32396354?v=4","gravatar_id":"","url":"https://api.github.com/users/kubeapps","html_url":"https://github.com/kubeapps","followers_url":"https://api.github.com/users/kubeapps/followers","following_url":"https://api.github.com/users/kubeapps/following{/other_user}","gists_url":"https://api.github.com/users/kubeapps/gists{/gist_id}","starred_url":"https://api.github.com/users/kubeapps/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kubeapps/subscriptions","organizations_url":"https://api.github.com/users/kubeapps/orgs","repos_url":"https://api.github.com/users/kubeapps/repos","events_url":"https://api.github.com/users/kubeapps/events{/privacy}","received_events_url":"https://api.github.com/users/kubeapps/received_events","type":"Organization","site_admin":false},"repo":{"id":107555654,"node_id":"MDEwOlJlcG9zaXRvcnkxMDc1NTU2NTQ=","name":"kubeapps","full_name":"kubeapps/kubeapps","owner":{"login":"kubeapps","id":32396354,"node_id":"MDEyOk9yZ2FuaXphdGlvbjMyMzk2MzU0","avatar_url":"https://avatars0.githubusercontent.com/u/32396354?v=4","gravatar_id":"","url":"https://api.github.com/users/kubeapps","html_url":"https://github.com/kubeapps","followers_url":"https://api.github.com/users/kubeapps/followers","following_url":"https://api.github.com/users/kubeapps/following{/other_user}","gists_url":"https://api.github.com/users/kubeapps/gists{/gist_id}","starred_url":"https://api.github.com/users/kubeapps/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kubeapps/subscriptions","organizations_url":"https://api.github.com/users/kubeapps/orgs","repos_url":"https://api.github.com/users/kubeapps/repos","events_url":"https://api.github.com/users/kubeapps/events{/privacy}","received_events_url":"https://api.github.com/users/kubeapps/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/kubeapps/kubeapps","description":"A web-based UI for deploying and managing applications in Kubernetes clusters","fork":false,"url":"https://api.github.com/repos/kubeapps/kubeapps","forks_url":"https://api.github.com/repos/kubeapps/kubeapps/forks","keys_url":"https://api.github.com/repos/kubeapps/kubeapps/keys{/key_id}","collaborators_url":"https://api.github.com/repos/kubeapps/kubeapps/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/kubeapps/kubeapps/teams","hooks_url":"https://api.github.com/repos/kubeapps/kubeapps/hooks","issue_events_url":"https://api.github.com/repos/kubeapps/kubeapps/issues/events{/number}","events_url":"https://api.github.com/repos/kubeapps/kubeapps/events","assignees_url":"https://api.github.com/repos/kubeapps/kubeapps/assignees{/user}","branches_url":"https://api.github.com/repos/kubeapps/kubeapps/branches{/branch}","tags_url":"https://api.github.com/repos/kubeapps/kubeapps/tags","blobs_url":"https://api.github.com/repos/kubeapps/kubeapps/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/kubeapps/kubeapps/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/kubeapps/kubeapps/git/refs{/sha}","trees_url":"https://api.github.com/repos/kubeapps/kubeapps/git/trees{/sha}","statuses_url":"https://api.github.com/repos/kubeapps/kubeapps/statuses/{sha}","languages_url":"https://api.github.com/repos/kubeapps/kubeapps/languages","stargazers_url":"https://api.github.com/repos/kubeapps/kubeapps/stargazers","contributors_url":"https://api.github.com/repos/kubeapps/kubeapps/contributors","subscribers_url":"https://api.github.com/repos/kubeapps/kubeapps/subscribers","subscription_url":"https://api.github.com/repos/kubeapps/kubeapps/subscription","commits_url":"https://api.github.com/repos/kubeapps/kubeapps/commits{/sha}","git_commits_url":"https://api.github.com/repos/kubeapps/kubeapps/git/commits{/sha}","comments_url":"https://api.github.com/repos/kubeapps/kubeapps/comments{/number}","issue_comment_url":"https://api.github.com/repos/kubeapps/kubeapps/issues/comments{/number}","contents_url":"https://api.github.com/repos/kubeapps/kubeapps/contents/{+path}","compare_url":"https://api.github.com/repos/kubeapps/kubeapps/compare/{base}...{head}","merges_url":"https://api.github.com/repos/kubeapps/kubeapps/merges","archive_url":"https://api.github.com/repos/kubeapps/kubeapps/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/kubeapps/kubeapps/downloads","issues_url":"https://api.github.com/repos/kubeapps/kubeapps/issues{/number}","pulls_url":"https://api.github.com/repos/kubeapps/kubeapps/pulls{/number}","milestones_url":"https://api.github.com/repos/kubeapps/kubeapps/milestones{/number}","notifications_url":"https://api.github.com/repos/kubeapps/kubeapps/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/kubeapps/kubeapps/labels{/name}","releases_url":"https://api.github.com/repos/kubeapps/kubeapps/releases{/id}","deployments_url":"https://api.github.com/repos/kubeapps/kubeapps/deployments","created_at":"2017-10-19T14:14:34Z","updated_at":"2018-08-14T13:46:22Z","pushed_at":"2018-08-14T20:32:55Z","git_url":"git://github.com/kubeapps/kubeapps.git","ssh_url":"git@github.com:kubeapps/kubeapps.git","clone_url":"https://github.com/kubeapps/kubeapps.git","svn_url":"https://github.com/kubeapps/kubeapps","homepage":"https://kubeapps.com","size":37708,"stargazers_count":430,"watchers_count":430,"language":"TypeScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":78,"mirror_url":null,"archived":false,"open_issues_count":76,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":78,"open_issues":76,"watchers":430,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483"},"html":{"href":"https://github.com/kubeapps/kubeapps/pull/483"},"issue":{"href":"https://api.github.com/repos/kubeapps/kubeapps/issues/483"},"comments":{"href":"https://api.github.com/repos/kubeapps/kubeapps/issues/483/comments"},"review_comments":{"href":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483/comments"},"review_comment":{"href":"https://api.github.com/repos/kubeapps/kubeapps/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/kubeapps/kubeapps/pulls/483/commits"},"statuses":{"href":"https://api.github.com/repos/kubeapps/kubeapps/statuses/becbcdc5e78f9fd66896d203a9e60555f0a39435"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"prydonius"}}