Comments (7)
josmo
commented on July 17, 2024
@acim with the command you're running that works I would would add the following to the settings
values:
- image.tag=master-f51c9d45
Let me know what comes out of that since the current drone config != the command you're running via zsh, but might give some insight to where the problem is :)
from drone-helm3.
acim
commented on July 17, 2024
No, I actually tried it with the following values:
values:
- image.tag=${DRONE_BRANCH}-${DRONE_COMMIT_SHA:0:8}
- imagePullSecrets[0].name=ablab-registryBut I still get the same error. In my bug report I just wanted to represent the things as simple as possible. And my chart is just "helm chart create" plus minor changes like listen port and health endpoints.
from drone-helm3.
josmo
commented on July 17, 2024
Ah thanks for the additional information! Do you mind pinning to pelotech/drone-helm3:0.14.2 ? I know master has one set of changes that I haven't tested fully yet and I know I've been using the 0.14.2 release for a while so maybe there's something I need to hunt down with that.
also whats around line 29 for the deployment? that might give some insights as well.
from drone-helm3.
acim
commented on July 17, 2024
- name: deploy
image: pelotech/drone-helm3:0.14.2
settings:
kube_api_server:
from_secret: deploy_server
kube_certificate:
from_secret: deploy_cert
kube_token:
from_secret: deploy_token
service_account: deploy
mode: upgrade
chart: chart
release: dijaspora
values:
- image.tag=${DRONE_BRANCH}-${DRONE_COMMIT_SHA:0:8}
- imagePullSecrets[0].name=ablab-registry
debug: trueGenerated config: {Command:upgrade DroneEvent:push UpdateDependencies:false AddRepos:[] RepoCertificate: RepoCACertificate: Debug:true Values:image.tag=master-faf4342a,imagePullSecrets[0].name=ablab-registry StringValues: ValuesFiles:[] Namespace: KubeToken:(redacted) SkipTLSVerify:false Certificate:******** APIServer:******** ServiceAccount:deploy ChartVersion: DryRun:false Wait:false ReuseValues:false KeepHistory:false Timeout: Chart:chart Release:dijaspora Force:false AtomicUpgrade:false CleanupOnFail:false LintStrictly:false Stdout:0xc00000e018 Stderr:0xc00000e020}
--
2 | calling *run.InitKube.Prepare (step 0)
3 | loading kubeconfig template from /root/.kube/config.tpl
4 | creating kubeconfig file at /root/.kube/config
5 | calling *run.Upgrade.Prepare (step 1)
6 | Generated command: '/usr/bin/helm --debug upgrade --install --set image.tag=master-faf4342a,imagePullSecrets[0].name=ablab-registry dijaspora chart'
7 | calling *run.InitKube.Execute (step 0)
8 | writing kubeconfig file to /root/.kube/config
9 | calling *run.Upgrade.Execute (step 1)
10 | history.go:52: [debug] getting history for release dijaspora
11 | upgrade.go:82: [debug] preparing upgrade for dijaspora
12 |
13 | upgrade.go:90: [debug] performing update for dijaspora
14 | upgrade.go:232: [debug] creating upgraded release for dijaspora
15 | client.go:163: [debug] checking 3 resources for changes
16 | action.go:218: [debug] warning: Failed to update release dijaspora: update: failed to update: secrets "sh.helm.release.v1.dijaspora.v4" is forbidden: User "system:serviceaccount:default:deploy" cannot update resource "secrets" in API group "" in the namespace "default"
17 | upgrade.go:291: [debug] warning: Upgrade "dijaspora" failed: could not get information about the resource: serviceaccounts "dijaspora" is forbidden: User "system:serviceaccount:default:deploy" cannot get resource "serviceaccounts" in API group "" in the namespace "default"
18 |
19 | action.go:218: [debug] warning: Failed to update release dijaspora: update: failed to update: secrets "sh.helm.release.v1.dijaspora.v5" is forbidden: User "system:serviceaccount:default:deploy" cannot update resource "secrets" in API group "" in the namespace "default"
20 | Error: UPGRADE FAILED: could not get information about the resource: serviceaccounts "dijaspora" is forbidden: User "system:serviceaccount:default:deploy" cannot get resource "serviceaccounts" in API group "" in the namespace "default"
21 | helm.go:75: [debug] serviceaccounts "dijaspora" is forbidden: User "system:serviceaccount:default:deploy" cannot get resource "serviceaccounts" in API group "" in the namespace "default"
22 | could not get information about the resource
23 | helm.sh/helm/v3/pkg/kube.(*Client).Update.func1
24 | /home/circleci/helm.sh/helm/pkg/kube/client.go:172
25 | helm.sh/helm/v3/pkg/kube.ResourceList.Visit
26 | /home/circleci/helm.sh/helm/pkg/kube/resource.go:32
27 | helm.sh/helm/v3/pkg/kube.(*Client).Update
28 | /home/circleci/helm.sh/helm/pkg/kube/client.go:164
29 | helm.sh/helm/v3/pkg/action.(*Upgrade).performUpgrade
30 | /home/circleci/helm.sh/helm/pkg/action/upgrade.go:246
31 | helm.sh/helm/v3/pkg/action.(*Upgrade).Run
32 | /home/circleci/helm.sh/helm/pkg/action/upgrade.go:91
33 | main.newUpgradeCmd.func1
34 | /home/circleci/helm.sh/helm/cmd/helm/upgrade.go:136
35 | github.com/spf13/cobra.(*Command).execute
36 | /go/pkg/mod/github.com/spf13/[email protected]/command.go:826
37 | github.com/spf13/cobra.(*Command).ExecuteC
38 | /go/pkg/mod/github.com/spf13/[email protected]/command.go:914
39 | github.com/spf13/cobra.(*Command).Execute
40 | /go/pkg/mod/github.com/spf13/[email protected]/command.go:864
41 | main.main
42 | /home/circleci/helm.sh/helm/cmd/helm/helm.go:74
43 | runtime.main
44 | /usr/local/go/src/runtime/proc.go:203
45 | runtime.goexit
46 | /usr/local/go/src/runtime/asm_amd64.s:1357
47 | UPGRADE FAILED
48 | main.newUpgradeCmd.func1
49 | /home/circleci/helm.sh/helm/cmd/helm/upgrade.go:138
50 | github.com/spf13/cobra.(*Command).execute
51 | /go/pkg/mod/github.com/spf13/[email protected]/command.go:826
52 | github.com/spf13/cobra.(*Command).ExecuteC
53 | /go/pkg/mod/github.com/spf13/[email protected]/command.go:914
54 | github.com/spf13/cobra.(*Command).Execute
55 | /go/pkg/mod/github.com/spf13/[email protected]/command.go:864
56 | main.main
57 | /home/circleci/helm.sh/helm/cmd/helm/helm.go:74
58 | runtime.main
59 | /usr/local/go/src/runtime/proc.go:203
60 | runtime.goexit
61 | /usr/local/go/src/runtime/asm_amd64.s:1357
62 | while executing *run.Upgrade step: exit status 1from drone-helm3.
acim
commented on July 17, 2024
This seems to be RBAC now, let's see.
from drone-helm3.
acim
commented on July 17, 2024
I fixed few RBAC problems but there seem to be more. However, I am not goint to fix them all today, it is enough :) Thank you for help, I will get back to you when I check this further.
from drone-helm3.
josmo
commented on July 17, 2024
@acim there's been no activity on this issue so I'm going to close it. If there's anything else feel free to reopen :)
from drone-helm3.
Related Issues (20)
- Add a new parameter "create_namespace" please
- Upgrade command seems to not use my kube_service_account parameter HOT 2
- Support for private repositories
- How to rollback?
- Update to Helm 3.8.0
- helm test supported?
- exec /bin/drone-helm: no such file or directory HOT 3
- Allow cluster across helm deployment by chart name
- Repo chart name treated as file name on upgrade
- open /root/.kube/config.tpl: permission denie HOT 1
- Does it support publishing of the Helm charts? HOT 5
- Question: Help needed on understanding this error HOT 1
- Support for publish to Helm Registry
- force_upgrade is being ignored HOT 2
- Remove build/drone-helm from the repo HOT 1
- Add a comment explaining the purpose env.settingAliases
- Support setting values from files using the --set-file flag
- Support for automatic migrations from v2 using 2to3 HOT 2
- drone-helm3 upgrade failed HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from drone-helm3.