charts icon indicating copy to clipboard operation
charts copied to clipboard
verified publisher icon kedacore

Install Keda (helm chart) wihout admin permissions on AKS

Open ustari28 opened this issue 2 years ago • 4 comments

We are trying to install in a specific namespace without administrator permissions then the installation fails.

Expected Behavior

Install Keda, with helm chart, without administrator permissions

Actual Behavior

Fail when the user hasn't administrator permissions on AKS

Steps to Reproduce the Problem

  1. Get a user without administrator permissions
  2. Install keda using helm chart on AKS.
  3. Get the error.

Specifications

  • KEDA Version: 2.8.1
  • Platform & Version: Azure
  • Kubernetes Version: 1.25.5
  • Scaler(s): kedacore/keda

ustari28 avatar Nov 14 '23 16:11 ustari28

Mind sharing some more information please?

tomkerkhove avatar Nov 15 '23 14:11 tomkerkhove

Hello,

In a nutshell, we have installed Keda and we use scalers in our own AKS where we have administrative permissions to change Azure Kubernetes configuration then we are moving to a Shared AKS with other projects and each one has a namespace. When we try to use the same command to install keda:

helm repo add kedacore https://kedacore.github.io/charts helm repo update helm upgrade --install keda kedacore/keda --namespace myownns --version 2.8.1

We receive the following error message:

Release "keda" does not exist. Installing it now. Error: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource CustomResourceDefinition "clustertriggerauthentications.keda.sh" in namespace "": customresourcedefinitions.apiextensions.k8s.io "clustertriggerauthentications.keda.sh" is forbidden: User "xxxxxxx-xxx-xxx" cannot get resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope

We understand that some script doesn't have setup the namespace and requiere information that we don't have permissions to access. The user that we are using doesn't have admin permission. Then there is some way to install with no admin permissions or to setup the namespace to all scripts?

Best regards.

ustari28 avatar Nov 15 '23 15:11 ustari28

User installing needs to have access to change CRDs as KEDA needs to be able to register these and think we even need to create some cluster roles as well

tomkerkhove avatar Nov 17 '23 12:11 tomkerkhove

Then there is some way to install with no admin permissions or to setup the namespace to all scripts?

Nope, unless you give the other user required permissions for the cluster-wide resources

tomkerkhove avatar Nov 17 '23 12:11 tomkerkhove