From 23efdbf29ac28bf85ccbe9d23f7b513a2da7d66f Mon Sep 17 00:00:00 2001 From: Long Date: Fri, 17 Sep 2021 14:39:05 +0000 Subject: [PATCH] troubleshooting: comment how to create pods Signed-off-by: Long --- .../troubleshooting/common_issues.md | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/daprdocs/content/en/operations/troubleshooting/common_issues.md b/daprdocs/content/en/operations/troubleshooting/common_issues.md index 77d963c80..7aab9d891 100644 --- a/daprdocs/content/en/operations/troubleshooting/common_issues.md +++ b/daprdocs/content/en/operations/troubleshooting/common_issues.md @@ -226,3 +226,26 @@ In order for mDNS to function properly, ensure `Micorosft Content Filter` is ina Microsoft Content Filter is disabled when the output is "Success". > Some organizations will re-enable the filter from time to time. If you repeatedly encounter app-id values missing, first check to see if the filter has been re-enabled before doing more extensive troubleshooting. + +## I can not create a pod + +If you can not create a pod as below: + +```bash +root:[dapr]$ kubectl run -i --tty --rm debug --image=busybox --restart=Never -- sh +Error from server: admission webhook "sidecar-injector.dapr.io" denied the request: service account 'user-xdd5l' not on the list of allowed controller accounts +``` + +You can create a clusterrolebind for a user: + +```bash +kubectl create clusterrolebinding dapr- --clusterrole=dapr-operator-admin --user +``` + +You can run below command to get all users in your cluster: + +```bash +kubectl config get-users +``` + +Then you can enjoy it!