我无法在 Kubernetes 上安装 app-identity-and-access-adapter

Question

veer我访问了项目 app-identity-and-access-adapter，我想在 Kubernetes 微服务项目中检查它。

IBM Cloud Kubernetes 集群的 app-identity-and-access-adapter 安装失败。

a) 添加存储库有效：

cloud-native-starter % helm repo add appidentityandaccessadapter https://raw.githubusercontent.com/ibm-cloud-security/app-identity-and-access-adapter/master/helm/appidentityandaccessadapter
"appidentityandaccessadapter" has been added to your repositories

b) 安装不成功：

cloud-native-starter % helm install --name appidentityandaccessadapter appidentityandaccessadapter/appidentityandaccessadapter
Error: secrets "appidentityandaccessadapter-cookie-sig-enc-keys" is forbidden: User "system:serviceaccount:kube-system:default" cannot delete resource "secrets" in API group "" in the namespace "istio-system"

我在网上搜索了解决方案，但没有成功。

我被documentation指到这里寻求帮助。

环境：

免费 IBM Cloud Kubernetes 集群

Kubernetes 版本：

Client Version: version.Info{Major:"1", Minor:"16", GitVersion:"v1.16.0", GitCommit:"2bd9643cee5b3b3a5ecbd3af49d09018f0773c77", GitTreeState:"clean", BuildDate:"2019-09-18T14:36:53Z", GoVersion:"go1.12.9", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"14", GitVersion:"v1.14.9+IKS", GitCommit:"405ef9ab782f5b51dff56dabe3628585d99afbfa", GitTreeState:"clean", BuildDate:"2019-11-13T21:34:44Z", GoVersion:"go1.12.12", Compiler:"gc", Platform:"linux/amd64"}

Kubernetes 上的 Istio：1.4

头盔：

Client: &version.Version{SemVer:"v2.15.2", GitCommit:"8dce272473e5f2a7bf58ce79bb5c3691db54c96b", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.15.2", GitCommit:"8dce272473e5f2a7bf58ce79bb5c3691db54c96b", GitTreeState:"clean"}

Answer 1

现在我可以安装了。

第 1 步：

我把helm安装的版本从v2.15.2改成了version.BuildInfo{Version:"v3.0.1", GitCommit:"7c22ef9ce89e0ebeb7125ba2ebf7d421f3e82ffa", GitTreeState:"clean", GoVersion:"go1.13.4"}

第 2 步：将 Kubernetes 命名空间设置为 istio-system

$ kubectl config set-context --current --namespace=istio-system

第 3 步：

我没有使用记录的语句，它对 helm 版本 v3.0.1 无效

helm install --name appidentityandaccessadapter ....

我使用了以下语句：

helm 安装 appidentityandaccessadapter ....

然后可以安装 appidentityandaccessadapter:

$ helm install  appidentityandaccessadapter appidentityandaccessadapter/appidentityandaccessadapter
NAME: appidentityandaccessadapter
LAST DEPLOYED: Fri Dec 13 11:39:10 2019
NAMESPACE: istio-system
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
App Identity and Access Adapter installed successfully!

顺便说一句：

你应该知道，你也可以在IBM AppID中找到安装步骤服务文档

我无法在 Kubernetes 上安装 app-identity-and-access-adapter

I can't install the app-identity-and-access-adapter on Kubernetes

ibm-appid