Channels
announcements
ask-marvin
best-practices-coordination-plane
data-ecosystem
data-tricks-and-tips
events
find-a-prefect-job
geo-bay-area
geo-berlin
geo-boston
geo-chicago
geo-colorado
geo-dc
geo-israel
geo-japan
geo-london
geo-nyc
geo-seattle
geo-texas
gratitude
introductions
marvin-in-the-wild
pacc-clearcover-june-12-2023
pacc-may-31-2023
ppcc-may-16-2023
prefect-ai
prefect-aws
prefect-azure
prefect-cloud
prefect-community
prefect-contributors
prefect-dbt
prefect-docker
prefect-gcp
prefect-getting-started
prefect-integrations
prefect-kubernetes
prefect-recipes
prefect-server
prefect-ui
random
show-us-what-you-got
Title
a
Alex Shea
08/11/2022, 2:36 PMI have a question regarding version one of the prefect agent in kubernetes. I am experiencing a similar issue to that of this question before. My error is
User \"system:serviceaccount:prefect:prefect-agent\" cannot create resource \"jobs\" in API group \"batch\" in the namespace \"prefect\"✅ 1
k
Khuyen Tran
08/11/2022, 2:37 PM@Christopher Boyd Have you seen this error before?
c
Christopher Boyd
08/11/2022, 2:39 PMIf you look at your manifest for that deployment, what does it have for the role?
The namespaces look fine, but the service account might be still using the default instead of the revised service account prefect-agent
it would be in this part:
apiVersion: <http://rbac.authorization.k8s.io/v1|rbac.authorization.k8s.io/v1>
kind: RoleBinding
metadata:
name: flow-runner-role-binding
namespace: default
subjects:
- kind: ServiceAccount
name: default
namespace: default
roleRef:
kind: Role
name: flow-runner
apiGroup: <http://rbac.authorization.k8s.io|rbac.authorization.k8s.io>If you aren’t using the default service account, you can update the service account for the deployment to the one you are using
a
Alex Shea
08/11/2022, 2:41 PMthere we go. I left out the namespace in the subject i bet
c
Christopher Boyd
08/11/2022, 2:42 PMIf you still get the issue after, and can share your manifest, I can look it over
a
Alex Shea
08/11/2022, 2:42 PMMy error is coming from the custom service account. I am going to update the subject in my rolebinding
👍 1
It worked to add the namespace in the subject as I had forgotten. The rolebinding was trying to bind to a service account in the default namespace
🙌 1
Thanks for your help @Christopher Boyd in catching my syntax mistake
🙌 1
c
Christopher Boyd
08/11/2022, 8:59 PMMy pleasure!