Skip to content

service accout has no permit about flow.volcano.sh in jobflow #2867

@lowang-bh

Description

@lowang-bh

What happened:

W0527 06:31:36.249698       1 reflector.go:424] volcano.sh/volcano/pkg/controllers/jobflow/jobflow_controller.go:134: failed to list *v1alpha1.JobFlow: jobflows.flow.volcano.sh is forbidden: User "system:serviceaccount:volcano-system:volcano-controllers" cannot list resource "jobflows" in API group "flow.volcano.sh" at the cluster scope
E0527 06:31:36.249790       1 reflector.go:140] volcano.sh/volcano/pkg/controllers/jobflow/jobflow_controller.go:134: Failed to watch *v1alpha1.JobFlow: failed to list *v1alpha1.JobFlow: jobflows.flow.volcano.sh is forbidden: User "system:serviceaccount:volcano-system:volcano-controllers" cannot list resource "jobflows" in API group "flow.volcano.sh" at the cluster scope
W0527 06:31:36.251258       1 reflector.go:424] volcano.sh/volcano/pkg/controllers/jobflow/jobflow_controller.go:135: failed to list *v1alpha1.JobTemplate: jobtemplates.flow.volcano.sh is forbidden: User "system:serviceaccount:volcano-system:volcano-controllers" cannot list resource "jobtemplates" in API group "flow.volcano.sh" at the cluster scope
E0527 06:31:36.251306       1 reflector.go:140] volcano.sh/volcano/pkg/controllers/jobflow/jobflow_controller.go:135: Failed to watch *v1alpha1.JobTemplate: failed to list *v1alpha1.JobTemplate: jobtemplates.flow.volcano.sh is forbidden: User "system:serviceaccount:volcano-system:volcano-controllers" cannot list resource "jobtemplates" in API group "flow.volcano.sh" at the cluster scope
W0527 06:31:36.252173       1 reflector.go:424] volcano.sh/volcano/pkg/controllers/jobtemplate/jobtemplate_controller.go:120: failed to list *v1alpha1.JobTemplate: jobtemplates.flow.volcano.sh is forbidden: User "system:serviceaccount:volcano-system:volcano-controllers" cannot list resource "jobtemplates" in API group "flow.volcano.sh" at the cluster scope
E0527 06:31:36.252214       1 reflector.go:140] volcano.sh/volcano/pkg/controllers/jobtemplate/jobtemplate_controller.go:120: Failed to watch *v1alpha1.JobTemplate: failed to list *v1alpha1.JobTemplate: jobtemplates.flow.volcano.sh is forbidden: User "system:serviceaccount:volcano-system:volcano-controllers" cannot list resource "jobtemplates" in API group "flow.volcano.sh" at the cluster scope

What you expected to happen:

  1. add api groups flow.volcano.sh in volcano-scheduler and volcano-controller ClusterRole to make this warnings disapear.
  2. add flow.volcano.sh to folder installer/helm/chart/volcano/crd

How to reproduce it (as minimally and precisely as possible):

deploy volcano controller with master branch

Anything else we need to know?:

need to add apigroup flow.volcano.sh in sa

Environment:

  • Volcano Version:
  • Kubernetes version (use kubectl version):
  • Cloud provider or hardware configuration:
  • OS (e.g. from /etc/os-release):
  • Kernel (e.g. uname -a):
  • Install tools:
  • Others:

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions