From ca29bee863e3bb72441d72c5260a34fdd8e3b156 Mon Sep 17 00:00:00 2001 From: reinaldo-pinto Date: Thu, 4 Apr 2019 11:45:49 -0300 Subject: [PATCH 1/4] Fix: failed forbidden adding rules needed of the Job on file --- .../cloudprovider/aws/examples/cluster-autoscaler-one-asg.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-one-asg.yaml b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-one-asg.yaml index ec658f5b58ce..3cb57f274ca7 100644 --- a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-one-asg.yaml +++ b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-one-asg.yaml @@ -52,6 +52,9 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["watch", "list", "get"] + - apiGroups: ["batch", "extensions"] + resources: ["jobs"] + verbs: ["get", "list", "watch", "patch"] --- apiVersion: rbac.authorization.k8s.io/v1 From 1b43a1cebf9b37c9ddeb689a9500ac0def369204 Mon Sep 17 00:00:00 2001 From: reinaldo-pinto Date: Mon, 22 Apr 2019 23:19:00 -0300 Subject: [PATCH 2/4] Fix: Failed forbidden, using RBAC. adding rules needed of the Job on file. cluster-autoscaler-autodiscover.yaml --- .../aws/examples/cluster-autoscaler-autodiscover.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-autodiscover.yaml b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-autodiscover.yaml index 4c43c2b916e7..018e0dabd596 100644 --- a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-autodiscover.yaml +++ b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-autodiscover.yaml @@ -52,7 +52,10 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["watch", "list", "get"] - + - apiGroups: ["batch", "extensions"] + resources: ["jobs"] + verbs: ["get", "list", "watch", "patch"] + --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role From 5c15ad590a4d108e3981c60f80c1330367bec793 Mon Sep 17 00:00:00 2001 From: reinaldo-pinto Date: Mon, 22 Apr 2019 23:19:56 -0300 Subject: [PATCH 3/4] Fix: failed forbidden, using RBAC. adding rules needed of the Job on file. cluster-autoscaler-multi-asg.yaml --- .../aws/examples/cluster-autoscaler-multi-asg.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-multi-asg.yaml b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-multi-asg.yaml index 7b6d8f20e360..a6c152fc8570 100644 --- a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-multi-asg.yaml +++ b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-multi-asg.yaml @@ -52,7 +52,10 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["watch", "list", "get"] - + - apiGroups: ["batch", "extensions"] + resources: ["jobs"] + verbs: ["get", "list", "watch", "patch"] + --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role From 129bc11f960db6f4df3f6d11385e479a5bdf8777 Mon Sep 17 00:00:00 2001 From: reinaldo-pinto Date: Mon, 22 Apr 2019 23:21:09 -0300 Subject: [PATCH 4/4] Fix: failed forbidden, using RBAC. adding rules needed of the Job on file. cluster-autoscaler-run-on-master.yaml --- .../aws/examples/cluster-autoscaler-run-on-master.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-run-on-master.yaml b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-run-on-master.yaml index fa4ad375878d..ea4e7943f5cd 100644 --- a/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-run-on-master.yaml +++ b/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-run-on-master.yaml @@ -52,6 +52,9 @@ rules: - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["watch", "list", "get"] + - apiGroups: ["batch", "extensions"] + resources: ["jobs"] + verbs: ["get", "list", "watch", "patch"] --- apiVersion: rbac.authorization.k8s.io/v1