Ingress-nginx: It seems the cluster it is running with Authorization enabled (like RBAC) and there is no permissions for the ingress controller. Please check the configuration

Created on 9 Mar 2018 · 4Comments · Source: kubernetes/ingress-nginx

Is this a request for help? (If yes, you should use our troubleshooting guide and community support channels, see https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/.):

What keywords did you search in NGINX Ingress controller issues before filing this one? (If you have found any duplicates, you should instead reply there.):

Is this a BUG REPORT or FEATURE REQUEST? (choose one):

BUG

NGINX Ingress controller version:

gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.14

Kubernetes version (use kubectl version):

1.9.3

Environment:

Cloud provider or hardware configuration:
Azure
OS (e.g. from /etc/os-release):

NAME="Ubuntu"
VERSION="16.04.3 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.3 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

Kernel (e.g. uname -a):

Linux k8s-master-68878545-0 4.13.0-1007-azure #9-Ubuntu SMP Thu Jan 25 10:47:32 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Install tools:
Others:

What happened:

I upgraded my cluster from Kubernetes 1.6.6 to 1.9.3 and then I deployed my NGINX ingress controller as usual. This time, the image keep breaking with the following logs:

I0309 19:25:28.017254 8 launch.go:113] &{NGINX 0.9.0-beta.14 git-8218421 https://github.com/kubernetes/ingress}
I0309 19:25:28.017282 8 launch.go:116] Watching for ingress class: nginx
I0309 19:25:28.017547 8 launch.go:291] Creating API client for https://10.0.0.1:443
I0309 19:25:28.044312 8 launch.go:304] Running in Kubernetes Cluster version v1.9 (v1.9.3) - git (clean) commit d2835416544f298c919e2ead3be3d0864b52323b - platform linux/amd64
F0309 19:25:28.046647 8 launch.go:136] ✖ It seems the cluster it is running with Authorization enabled (like RBAC) and there is no permissions for the ingress controller. Please check the configuration

What you expected to happen:

NGINX Controller to start running successfully.

How to reproduce it (as minimally and precisely as possible):

Its necessary to have a 1.9.3 cluster and try to install NGINX controller.

Anything else we need to know:

You can use the following yaml file:

kind: Deployment
apiVersion: extensions/v1beta1
metadata:
  name: ingress-nginx
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: ingress-nginx
    spec:
      terminationGracePeriodSeconds: 60
      containers:
      - image: gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.14
        name: ingress-nginx
        imagePullPolicy: Always
        ports:
          - name: http
            containerPort: 80
            protocol: TCP
          - name: https
            containerPort: 443
            protocol: TCP
        livenessProbe:
          httpGet:
            path: /healthz
            port: 10254
            scheme: HTTP
          initialDelaySeconds: 30
          timeoutSeconds: 5
        env:
          - name: POD_NAME
            valueFrom:
              fieldRef:
                fieldPath: metadata.name
          - name: POD_NAMESPACE
            valueFrom:
              fieldRef:
                fieldPath: metadata.namespace
        args:
        - /nginx-ingress-controller
        - --default-backend-service=$(POD_NAMESPACE)/nginx-default-backend
        - --watch-namespace=$(POD_NAMESPACE)

Source