gke-autoneg-controller
gke-autoneg-controller copied to clipboard
Add compute.backendServices.list to the list of permissions required for workload identity sa
Hi Team
I am getting a
ERROR Reconciler error {"controller": "service", "controllerGroup": "", "controllerKind": "Service", "Service": {"name":"******","namespace":"*******"}, "namespace": "******", "name": "********r", "reconcileID": "cf4d3868-3fea-4e22-9c63-939feac01985", "error": "googleapi: Error 403: Required 'compute.backendServices.list' permission for 'projects/*********', forbidden"}
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:324
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:265
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:226
Seems to be benign here mostly but unsure if it is actually needed.
Version: v1.0.0
A suggestion from my end would be to update the script here if its needed.
Thanks