Submission failed. kubernetes.client.exceptions.Ap...
# prefect-community
l
Submission failed. kubernetes.client.exceptions.ApiException: (403) Reason: Forbidden HTTP response headers: HTTPHeaderDict({'Audit-Id': '4989dc04-c2e2-4012-9b6c-98b8571c5c6b', 'Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'X-Content-Type-Options': 'nosniff', 'X-Kubernetes-Pf-Flowschema-Uid': '8938bc78-cb27-4df4-8721-c72a2d011073', 'X-Kubernetes-Pf-Prioritylevel-Uid': '06844520-846e-41ab-94b2-4492b39b76b8', 'Date': 'Tue, 25 Apr 2023 172538 GMT', 'Content-Length': '349'}) HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"jobs.batch is forbidden: User \"systemserviceaccountcore-prefect2-flows:prefect-agent\" cannot create resource \"jobs\" in API group \"batch\" in the namespace \"\\\"core-prefect2-flows\\\"\"","reason":"Forbidden","details":{"group":"batch","kind":"jobs"},"code":403}
z
Hi this looks a lack of permissions to create a job?
l
Yes. It is not able to create a job. What kind of extra permissions do we need? Both prefect agent and flow are in the same namespace
z
Try looking at the permissions in
prefect kubernetes manifest agent