Since you need to provide service account for App CRs, we've included two common service account configurations:
-
https://github.com/vmware-tanzu/carvel-kapp-controller/blob/master/examples/rbac/default-ns.yml: It creates
default-ns-sa
service account indefault
namespace that allows to change any resource indefault
namespace. (Example usage:simple-app-http.yml
) -
https://github.com/vmware-tanzu/carvel-kapp-controller/blob/master/examples/rbac/cluster-admin.yml: It creates
cluster-admin-sa
service account withindefault
namespace that allows to change any resource in the cluster. (Example usage:istio-knative.yml
)
$ kapp deploy -a default-ns-rbac -f https://github.com/vmware-tanzu/carvel-kapp-controller/blob/master/examples/rbac/default-ns.yml
Once that's done, deploy any example in this repo.