Hi folks! I'm trying to get set up to run an agent & the deployment-flows it manages in an EKS cluster. So far I can start the agent & it is monitoring the expected queue, but it turns out to be running as user
system:serviceaccount:prefect:default
which does not have (and should not have) the necessary permissions. How can I change that to run as a more appropriate user/role?
Shirley Monroe
01/13/2023, 3:57 PM
I'm bringing up the agent from a yaml file using
kubectl apply -f
, if that's relevant
c
Christopher Boyd
01/13/2023, 4:58 PM
How did you install the agent?
and what user / role do you want to use?
s
Shirley Monroe
01/13/2023, 8:10 PM
OK so this turned out not to be a prefect-specific issue, but rather me not understanding what I was looking at in several configs & having things set up wrong as a consequence. The last two parts of that user string are the namespace & role; the IAM role that I needed to use was allowing the wrong namespace, and the yaml for the agent was using the wrong role.
👍 1
j
jawnsy
01/13/2023, 10:02 PM
Thanks for sharing the details of the problem/resolution, Shirley!
Bring your towel and join one of the fastest growing data communities. Welcome to our second-generation open source orchestration platform, a completely rethought approach to dataflow automation.