<p>I believe I have followed this guide:
<a href="https://medium.com/@hobochild/installing-cert-manager-on-a-gcloud-k8s-cluster-d379223f43ff" rel="nofollow noreferrer">https://medium.com/@hobochild/installing-cert-manager-on-a-gcloud-k8s-cluster-d379223f43ff</a></p>

<p>which, has me install the <code>without-rbac</code> version of cert-manager from this repo:
<a href="https://github.com/jetstack/cert-manager" rel="nofollow noreferrer">https://github.com/jetstack/cert-manager</a></p>

<p>however when the cert-manager pod boots up it starts spamming this error:
<code>leaderelection.go:224] error retrieving resource lock cert-manager/cert-manager-controller: configmaps "cert-manager-controller" is forbidden: User "system:serviceaccount:cert-manager:default" cannot get configmaps in the namespace "cert-manager": Unknown user "system:serviceaccount:cert-manager:default"</code></p>

<p>Hoping someone has some ideas.</p>

kahsm
<p>The errors seem to be coming from RBAC.  If you're running this in <code>minikube</code> you can grant the <code>default</code> service account in the <code>cert-manager</code> namespace the proper rights by running:</p>

<p><code>kubectl create clusterrolebinding cert-manager-cluster-admin --clusterrole=cluster-admin --serviceaccount=cert-manager:default
</code></p>

<p>After creating the role binding, <code>cert-manager</code> should complete its startup.</p>
