Skip to content

Missing RBAC permission on scale-set-controller #3701

@DaazKu

Description

@DaazKu

Checks

Controller Version

0.9.0

Deployment Method

Helm

Checks

  • This isn't a question or user support case (For Q&A and community support, go to Discussions).
  • I've read the Changelog before submitting this issue and I'm sure it's not due to any recently-introduced backward-incompatible changes

To Reproduce

Install the controller and check the logs

Describe the bug

2024-08-08T15:47:17.668170621Z E0808 15:47:17.668000 1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"gha-scale-set-controller-gha-rs-controller.17e9cb756dec22dc", GenerateName:"", Namespace:"gha-scale-set-controller", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Lease", Namespace:"gha-scale-set-controller", Name:"gha-scale-set-controller-gha-rs-controller", UID:"993f6cde-23c8-4a71-80c8-a51e090533ca", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"1606163212", FieldPath:""}, Reason:"LeaderElection", Message:"gha-scale-set-controller-gha-rs-controller-d4c8bcfd5-6mkgj_1bc6c3c8-ac7c-43bd-b8d8-5e7853c1eece became leader", Source:v1.EventSource{Component:"gha-scale-set-controller-gha-rs-controller-d4c8bcfd5-6mkgj_1bc6c3c8-ac7c-43bd-b8d8-5e7853c1eece", Host:""}, FirstTimestamp:time.Date(2024, time.August, 8, 15, 47, 17, 661729500, time.Local), LastTimestamp:time.Date(2024, time.August, 8, 15, 47, 17, 661729500, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"gha-scale-set-controller-gha-rs-controller-d4c8bcfd5-6mkgj_1bc6c3c8-ac7c-43bd-b8d8-5e7853c1eece", ReportingInstance:""}': 'events is forbidden: User "system:serviceaccount:gha-scale-set-controller:gha-scale-set-controller-gha-rs-controller" cannot create resource "events" in API group "" in the namespace "gha-scale-set-controller"' (will not retry!)

Describe the expected behavior

The controller should have proper permission set on the role.

Additional Context

N/A

Controller Logs

N/A

Runner Pod Logs

N/A

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workinggha-runner-scale-setRelated to the gha-runner-scale-set modeneeds triageRequires review from the maintainers

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions