https://prefect.io logo
Title
l

Leela Surya Teja Mangamuri

04/25/2023, 5:50 PM
Submission failed. kubernetes.client.exceptions.ApiException: (403) Reason: Forbidden HTTP response headers: HTTPHeaderDict({'Audit-Id': '4989dc04-c2e2-4012-9b6c-98b8571c5c6b', 'Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'X-Content-Type-Options': 'nosniff', 'X-Kubernetes-Pf-Flowschema-Uid': '8938bc78-cb27-4df4-8721-c72a2d011073', 'X-Kubernetes-Pf-Prioritylevel-Uid': '06844520-846e-41ab-94b2-4492b39b76b8', 'Date': 'Tue, 25 Apr 2023 17:25:38 GMT', 'Content-Length': '349'}) HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"jobs.batch is forbidden: User \"system😒erviceaccount:core-prefect2-flows:prefect-agent\" cannot create resource \"jobs\" in API group \"batch\" in the namespace \"\\\"core-prefect2-flows\\\"\"","reason":"Forbidden","details":{"group":"batch","kind":"jobs"},"code":403}
z

Zanie

04/25/2023, 5:51 PM
Hi this looks a lack of permissions to create a job?
l

Leela Surya Teja Mangamuri

04/25/2023, 11:22 PM
Yes. It is not able to create a job. What kind of extra permissions do we need? Both prefect agent and flow are in the same namespace
z

Zanie

04/26/2023, 2:44 AM
Try looking at the permissions in
prefect kubernetes manifest agent