Cannot create Kafka ACL CRD
Closed this issue · 2 comments
ak-aiven commented
I am unable to create a Kafka ACL CRD
Using helm and the configuration in the docs The ServiceUser is created but the ACL fails with the following error:
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning UnableToAddFinalizer 18m (x12 over 19m) kafka-acl-reconciler kafkaacls.aiven.io "crab" is forbidden: User "system:serviceaccount:default:default" cannot update resource "kafkaacls" in API group "aiven.io" in the namespace "default"
Normal ReconcilationStarted 8m13s (x18 over 19m) kafka-acl-reconciler starting reconciliation
Using Kafka v2.8.1
mhoffm-aiven commented
The KafkaACL resource is missing the RBAC for updates; we need to add it and regenerate our deployments.