Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: k8s-jobs role needs batch apigroup #14343

Merged

Conversation

jakubmatyszewski
Copy link
Contributor

Description

Following documentation of druid-kubernetes-overlord-extensions and applying suggested Role results in an error in Overlord container:

Caused by: io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://172.20.0.1:443/apis/batch/v1/namespaces/druid-test/jobs?labelSelector=druid.k8s.peons. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. jobs.batch is forbidden: User "system:serviceaccount:druid-test:druid" cannot list resource "jobs" in API group "batch" in the namespace "druid-test".

This issue is solved when Role includes batch in ApiGroups - this PR improves docs to include this information.


  • been self-reviewed

  • been tested in a test Druid cluster.

Copy link
Contributor

@cryptoe cryptoe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!!

@abhishekagarwal87 abhishekagarwal87 merged commit cc159f4 into apache:master Jul 4, 2023
9 checks passed
@abhishekagarwal87 abhishekagarwal87 added this to the 27.0 milestone Jul 19, 2023
sergioferragut pushed a commit to sergioferragut/druid that referenced this pull request Jul 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants