actions-runner-controller icon indicating copy to clipboard operation
actions-runner-controller copied to clipboard

Missing RBAC permission on scale-set-controller

Open DaazKu opened this issue 6 months ago • 0 comments

Checks

  • [X] I've already read https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/troubleshooting-actions-runner-controller-errors and I'm sure my issue is not covered in the troubleshooting guide.
  • [X] I am using charts that are officially provided

Controller Version

0.9.0

Deployment Method

Helm

Checks

  • [X] This isn't a question or user support case (For Q&A and community support, go to Discussions).
  • [X] I've read the Changelog before submitting this issue and I'm sure it's not due to any recently-introduced backward-incompatible changes

To Reproduce

Install the controller and check the logs

Describe the bug

2024-08-08T15:47:17.668170621Z E0808 15:47:17.668000 1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"gha-scale-set-controller-gha-rs-controller.17e9cb756dec22dc", GenerateName:"", Namespace:"gha-scale-set-controller", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Lease", Namespace:"gha-scale-set-controller", Name:"gha-scale-set-controller-gha-rs-controller", UID:"993f6cde-23c8-4a71-80c8-a51e090533ca", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"1606163212", FieldPath:""}, Reason:"LeaderElection", Message:"gha-scale-set-controller-gha-rs-controller-d4c8bcfd5-6mkgj_1bc6c3c8-ac7c-43bd-b8d8-5e7853c1eece became leader", Source:v1.EventSource{Component:"gha-scale-set-controller-gha-rs-controller-d4c8bcfd5-6mkgj_1bc6c3c8-ac7c-43bd-b8d8-5e7853c1eece", Host:""}, FirstTimestamp:time.Date(2024, time.August, 8, 15, 47, 17, 661729500, time.Local), LastTimestamp:time.Date(2024, time.August, 8, 15, 47, 17, 661729500, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"gha-scale-set-controller-gha-rs-controller-d4c8bcfd5-6mkgj_1bc6c3c8-ac7c-43bd-b8d8-5e7853c1eece", ReportingInstance:""}': 'events is forbidden: User "system:serviceaccount:gha-scale-set-controller:gha-scale-set-controller-gha-rs-controller" cannot create resource "events" in API group "" in the namespace "gha-scale-set-controller"' (will not retry!)

Describe the expected behavior

The controller should have proper permission set on the role.

Additional Context

N/A

Controller Logs

N/A

Runner Pod Logs

N/A

DaazKu avatar Aug 08 '24 16:08 DaazKu