Skip to main content
NetApp Knowledge Base

Upgrading Trident Helm installation using private registry fails with RBAC error

  1. Last updated
  2. Save as PDF
Views:
17
Visibility:
Public
Votes:
0
Category:
trident-kubernetes
Specialty:
snapx
Last Updated:

Applies to

  • NetApp Trident 25.10.0
  • Trident Helm installation
  • Private Trident image registry

Issue

  • Upgrading a Trident Helm installation, using Trident images and Helm chart from a private registry, fails with the following RBAC error:

>> kubectl describe tridentorchestrators.trident.netapp.io trident

Message:                         Failed to install Trident; err: unable to create RBAC objects while verifying Trident version; err: failed to create the Trident cluster role; failed to create or patch Trident cluster role; could not patch Trident Cluster role; clusterroles.rbac.authorization.k8s.io "trident-controller" is forbidden: user "system:serviceaccount:trident:trident-operator" (groups=["system:serviceaccounts" "system:serviceaccounts:trident" "system:authenticated"]) is attempting to grant RBAC permissions not currently held:
{APIGroups:["storage.k8s.io"], Resources:["volumeattachments"], Verbs:["delete"]}
{APIGroups:["trident.netapp.io"], Resources:["tridentnoderemediations"], Verbs:["get" "list" "watch" "create" "delete" "update" "patch"]}
{APIGroups:["trident.netapp.io"], Resources:["tridentnoderemediations/status"], Verbs:["get" "list" "watch" "create" "delete" "update" "patch"]}
{APIGroups:["trident.netapp.io"], Resources:["tridentnoderemediationtemplates"], Verbs:["get" "list" "watch" "create" "delete" "update" "patch"]}
{APIGroups:["trident.netapp.io"], Resources:["tridentnoderemediationtemplates/status"], Verbs:["get" "list" "watch" "create" "delete" "update" "patch"]}

  • Upgrading the same Trident Helm installation using the default public / online Trident image registry completes successfully

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.