In Lab 2.3
I got an error after entering command from Task 1.
Error: release nfs-client-provisioner failed: namespace “nfs-client-provisioner” is forbiden: User “system:serviceacount:kube-system:tiller” cannot get resource “namespaces” in API group “” in the namespace “nfs-client-provisioner”
Usually, this is caused by a typographical error. Check to make sure there were no errors in the command.
I try few times with the same error. have you any advice. What should I chek?
I will have to do some research and get back to you.
[QUOTE=jadnet;59456]In Lab 2.3
I got an error after entering command from Task 1.
Error: release nfs-client-provisioner failed: namespace “nfs-client-provisioner” is forbiden: User “system:serviceacount:kube-system:tiller” cannot get resource “namespaces” in API group “” in the namespace “nfs-client-provisioner”[/QUOTE]
In order do create it you need first create the roles used by tiller, the following commands are a example how you can use it.
kubectl create serviceaccount --namespace kube-system tiller
kubectl create clusterrolebinding tiller-cluster-rule
–clusterrole=cluster-admin --serviceaccount=kube-system:tiller
kubectl patch deploy --namespace kube-system tiller-deploy -p
‘{“spec”:{“template”:{“spec”:{“serviceAccount”:“tiller”}}}}’
Cya, I hope it helps!
Yes, it looks as though the tiller service account was not created correctly (or at all). Check lab 2-2, Task 3. It should be on page 16 of the lab manual.
I did everything once more without that issue. Most likely I used bad domain in UAA_HOST.
I am glad that everything is working for you now.