Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

tidb-operator can't run on k8s v1.17 #1413

Closed
weekface opened this issue Dec 25, 2019 · 4 comments · Fixed by #1410
Closed

tidb-operator can't run on k8s v1.17 #1413

weekface opened this issue Dec 25, 2019 · 4 comments · Fixed by #1410

Comments

@weekface
Copy link
Contributor

The tidb-scheduler component failed to run:

E1225 10:18:02.902005       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:02.902028       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:05.002474       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:05.002498       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:07.977836       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:07.977862       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:10.062491       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:10.062515       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:13.002375       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:13.002403       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:17.297473       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:17.297505       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:19.449242       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:19.449325       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
E1225 10:18:23.145373       1 leaderelection.go:331] error retrieving resource lock pingcap/tidb-scheduler: leases.coordination.k8s.io "tidb-scheduler" is forbidden: User "system:serviceaccount:pingcap:tidb-scheduler" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "pingcap"
I1225 10:18:23.145398       1 leaderelection.go:247] failed to acquire lease pingcap/tidb-scheduler
@weekface
Copy link
Contributor Author

#1355

@weekface
Copy link
Contributor Author 

- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
- apiGroups:
  - coordination.k8s.io
  resourceNames:
  - kube-scheduler
  resources:
  - leases
  verbs:
  - get
  - update

kubernetes v1.17 limit the leases resource on kube-scheduler clusterrule.

@shonge
Copy link
Member

shonge commented Dec 25, 2019

Let me fix it.

@weekface
Copy link
Contributor Author

@shonge There is already a pr fixing this issue: #1410

@weekface weekface mentioned this issue Dec 25, 2019
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

ci: add k8s v1.17 support weekface/tidb-operator
2 participants
@weekface @shonge