Hello there folks I m a prefect cloud user running agents on

Question

Hello there folks I m a prefect cloud user running agents on GKE autopilot I ve recently updated my prefect agent from 2 7 0 to 2 7 8 to be able to deal with was getting thousands of those every day and am now struggling with an issue with the new agent namely permission denied while trying to read the `kube system` namespace As per the workaround in the bug I ve updated my existing staging agent role so that it can read namespaces ``` ~ kubectl describe role prefect staging agent Name prefect staging agent Labels lt none gt Annotations lt none gt PolicyRule Resources Non Resource URLs Resource Names Verbs jobs batch list watch create update patch get delete namespaces list watch get pods log list watch get pods status list watch get pods list watch get ``` to no avail Still getting ` Failure message namespaces kube system is forbidden User system serviceaccount default default cannot get resource namespaces in API group in the namespace kube system reason Forbidden ` Any ideas of what might I be missing Guess my main concern is that kube system might be off limits for autopilot but couldn t find anything saying you can t read stuff from it

Giuliano Mega · Answer

OK given that I m deploying agents with Terraform I m trying a workaround here where I read the uid from the kube system namespace and then pass that to the agent via PREFECT KUBERNETES CLUSTER UID which I just discovered exists slightly smiling face Let s see if that works

Giuliano Mega · Answer

success sweat smile

Giuliano Mega · Answer

for reference ```data kubernetes namespace kube system metadata name = kube system To access the UID data kubernetes namespace kube system metadata 0 uid```