{"action":"opened","issue":{"url":"https://api.github.com/repos/istio/issues/issues/89","repository_url":"https://api.github.com/repos/istio/issues","labels_url":"https://api.github.com/repos/istio/issues/issues/89/labels{/name}","comments_url":"https://api.github.com/repos/istio/issues/issues/89/comments","events_url":"https://api.github.com/repos/istio/issues/issues/89/events","html_url":"https://github.com/istio/issues/issues/89","id":263477948,"number":89,"title":"Clean up code creating pilot CRDs as they are now created at install time","user":{"login":"mdhume","id":6944740,"avatar_url":"https://avatars0.githubusercontent.com/u/6944740?v=4","gravatar_id":"","url":"https://api.github.com/users/mdhume","html_url":"https://github.com/mdhume","followers_url":"https://api.github.com/users/mdhume/followers","following_url":"https://api.github.com/users/mdhume/following{/other_user}","gists_url":"https://api.github.com/users/mdhume/gists{/gist_id}","starred_url":"https://api.github.com/users/mdhume/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mdhume/subscriptions","organizations_url":"https://api.github.com/users/mdhume/orgs","repos_url":"https://api.github.com/users/mdhume/repos","events_url":"https://api.github.com/users/mdhume/events{/privacy}","received_events_url":"https://api.github.com/users/mdhume/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-10-06T15:06:21Z","updated_at":"2017-10-06T15:06:21Z","closed_at":null,"author_association":"NONE","body":"<!-- This form is for bug reports and feature requests ONLY! \r\nIf you're looking for help check https://istio.io/troubleshooting/\r\n-->\r\n\r\n**Is this a BUG or FEATURE REQUEST?:** Feature Request\r\n\r\n**Did you review existing epics or issues to identify if this already being worked on?** (please try to add the correct labels and epics):\r\nYes (I asked on google groups - https://groups.google.com/forum/#!topic/istio-users/NrQ6iABjcqo  and they asked me to create an issue. It is related to https://github.com/istio/pilot/issues/1375)\r\n\r\n**Bug:**\r\nN\r\n\r\n**What Version of Istio and Kubernetes are you using, where did you get Istio from, Installation details**\r\n```\r\nistioctl version 0.2.6\r\nkubectl version 1.7.7\r\n```\r\n\r\n**Is Istio Auth enabled or not ?**\r\nDid you install istio.yaml, istio-auth.yaml....\r\nNot enabled, used istio.yaml\r\n\r\n**What happened**:\r\nI wanted to restrict the RBAC permissions given to pilot by setting verbs to \"get\", \"list\", \"watch\" for \"customresourcedefinitions\" instead of \"*\" . Pilot failed to start with the error - I1005 20:40:51.945100 1 client.go:169] registering CRD \"routerules.config.istio.io\" Error: failed to register custom resources. User \"system:serviceaccount:istio-system:istio-pilot-service-account\" cannot create customresourcedefinitions.apiextensions.k8s.io at the cluster scope.\r\n\r\n**What you expected to happen:**\r\nExpected Pilot to start since CRDs are created at start time.\r\n\r\n**How to reproduce it:**\r\nSet RBAC permissions for \"customresourcedefinitions\" to \"get\", \"list\", \"watch\"\r\n\r\n**Feature Request:**\r\nY\r\n\r\n**Describe the feature:**\r\nPilot CRDs are being created in Pilot to ensure they are available before pilot starts. Since they are now created at install time, this can be removed."}}
{"actor":{"display_login":"mdhume"}}