-
Bug
-
Resolution: Fixed
-
Critical
-
None
-
kubernetes-plugin: 1.19.3
jenkins: 2.176.2
kuberentes: 1.13 AWS EKS
There are no volumes specified in our Pod template.
Even though, Jenkins is trying to create a PVC and fails with an access denied error.
/var/log/jenkins/jenkins.log
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: POST at: https://1293c2340bb6c04946f7328ce8ca2ad7.sk1.us-east-1.eks.amazonaws.com /api/v1/namespaces/ci/persistentvolumeclaims. Message: Forbidden! User kube-aws-translator-admin doesn't have permission. persistentvolumeclaims is forbidde n: User "system:serviceaccount:ci:jenkins" cannot create resource "persistentvolumeclaims" in API group "" in the namespace "ci". at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:510) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:447) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:413) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:372) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleCreate(OperationSupport.java:241) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleCreate(BaseOperation.java:819) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.create(BaseOperation.java:334) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.create(BaseOperation.java:330) at org.csanchez.jenkins.plugins.kubernetes.volumes.workspace.DynamicPVCWorkspaceVolume.createVolume(DynamicPVCWorkspaceVolume.java:94) at org.csanchez.jenkins.plugins.kubernetes.KubernetesLauncher.launch(KubernetesLauncher.java:130) at hudson.slaves.SlaveComputer$1.call(SlaveComputer.java:294) at jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46) at jenkins.security.ImpersonatingExecutorService$2.call(ImpersonatingExecutorService.java:71) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)