I’m using Gitlab CI/CD to deploy a review app to my Kubernetes cluster.
We are using ambassador as API Gateway, so I wanted to integrate it into the review app process. Using the Gitlab Kubernetes integration, I’m able to deploy the pods successfully, but the Mapping and Host deployment fail with this error:
Error from server (Forbidden): error when retrieving current configuration of:
Resource: "getambassador.io/v2, Resource=hosts", GroupVersionKind: "getambassador.io/v2, Kind=Host"
Name: "<deploy_environment>", Namespace: "<deploy_namespace>"
from server for: "STDIN": hosts.getambassador.io "<deploy_environment>" is forbidden: User "system:serviceaccount:<deploy_namespace>:<deploy_namespace>-service-account" cannot get resource "hosts" in API group "getambassador.io" in the namespace "<delpoy_namespace>"
The same for the Mapping resource.
Is there any way to add this resources to the generated service account? Or, maybe, the only would be using a global kubeconfig with admin role?