What permission do the Kubernetes Service account need to ru

Question

What permission do the Kubernetes Service account need to run flows as k8s jobs We use argo cd and i have created a role to create jobs Looks like it s trying to get cluster namespaces as well

Jamie Zieziula · Answer

Hi < Sivanandha Rajadurai> the worker should only need these permissions ``` apiGroups resources pods pods log pods status verbs get watch list apiGroups batch resources jobs verbs get list watch create update patch delete ```

Jamie Zieziula · Answer

however on install the worker does attempt to query the `kube system` namespace and grab its UUID If you don t want to allow that you can specify any UUID to use on the workers configuration under container environment variables like so ``` name PREFECT KUBERNETES CLUSTER UID value UUID HERE ```

Sivanandha Rajadurai · Answer

Yup thanks

Marty Ko · Answer

what is the purpose of getting this uuid

Jamie Zieziula · Answer

Hi Marty <https github com PrefectHQ prefect pull 7747|this> is the PR where it was introduced and does a good job explaining what we use it for