one or more notifiers returned an error: rpc error: code = Internal desc = notifier(k8sbundle)

[developer-guy]

We (w/@Dentrax) tried to install this helm chart and got the following error:

level=error msg="Fatal run error" error="one or more notifiers returned an error: rpc error: code = Internal desc = notifier(k8sbundle): unable to update: unable to get list: configmaps \"spire-bundle\" is forbidden: User \"system:serviceaccount:spiffe-system:spire-server\" cannot get resource \"configmaps\" in API group \"\" in the namespace \"spire\""
time="2022-10-24T11:03:10Z" level=error msg="Server crashed" error="one or more notifiers returned an error: rpc error: code = Internal desc = notifier(k8sbundle): unable to update: unable to get list: configmaps \"spire-bundle\" is forbidden: User \"system:serviceaccount:spiffe-system:spire-server\" cannot get resource \"configmaps\" in API group \"\" in the namespace \"spire\""

The error comes from the code part¹, and we have opened an issue² to fix it. Until it gets fixed, I suggest changing the {{ .Release.Namespace }} parts with spire.

Footnotes

1. https://github.com/spiffe/spire/blob/bfa325e021e1bb53a5c4e9b376a9422bd63a1416/pkg/server/plugin/notifier/k8sbundle/k8sbundle.go#L137 ↩

2. https://github.com/spiffe/spire/issues/3518 ↩

[developer-guy]

We have opened a PR to fix this:

≫ spiffe/spire#3519