You should install MessageSight in a non-default namespace. When you install in non-default namespaces, the charts assume that you have created default non-privileged and privileged ServiceAcccounts to install MessageSight. You can find yaml configuration files and scripts to set up these default objects in the ibm_cloud_pak for MessageSight under pak_extensions/prereqs.
Note: The ibm_cloud_pak is located with the MessageSight chart content on github.
kubectl create namespace messagesight
One-time configuration steps
To install MessageSight into non-default namespaces, you must create pod security policies (PSPs) and roles that are used to grant service accounts access to install MessageSight. These configuration actions require cluster administrator access.
Download the following files and script: Configuration files:
messagesight-cr-psp.yaml
messagesight-priv-cr-psp.yaml
Script:
createDefaultPSPAndRole.sh
Run the createDefaultPSPAndRole.sh script to create the PSPs that are used to grant install access to the service accounts that are created in the next section.