Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: adds service account to keystone argo event source #542

Merged
merged 1 commit into from
Dec 10, 2024

Conversation

nicholaskuechler
Copy link
Contributor

@nicholaskuechler nicholaskuechler commented Dec 9, 2024

I noticed my test tenants aren't getting deleted in nautobot when I delete them in keystone. Upon investigating, I found the argo event is failing with an error regarding the service account: 

Error (exit code 1): pods "keystone-event-project-mtl4s" is forbidden: User "system:serviceaccount:argo-events:default" cannot patch resource "pods" in API group "" in the namespace "argo-events"

I believe the default user is old.. it's mentioned in https://github.com/rackerlabs/understack/blob/main/components/argo-events/default-role.yaml but this file seems unused. The other workflows are using a workflow user, so I set this keystone workflow to the same, and the argo events are successfully completing now, and the projects are getting deleted in nautobot as expected.

Screenshot 2024-12-09 at 5 06 22 PM

@nicholaskuechler nicholaskuechler marked this pull request as ready for review December 9, 2024 23:09
@skrobul skrobul added this pull request to the merge queue Dec 10, 2024
Merged via the queue into main with commit 3d932b4 Dec 10, 2024
15 checks passed
@skrobul skrobul deleted the PUC-703-20241209 branch December 10, 2024 11:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants