Error on create HPA resource

[sleipnir]

Error on create HPA resource

[mruoss]

Well - look at the error message:

horizontalpodautoscalers.autoscaling "shopping-cart-hpa-autoscaler" is forbidden: User "system:serviceaccount:eigr-functions:eigr-functions-controller" cannot patch resource "horizontalpodautoscalers" in API group "autoscaling" in the namespace "default"

You have to configure RBAC correctly!

[sleipnir]

Well - look at the error message:

horizontalpodautoscalers.autoscaling "shopping-cart-hpa-autoscaler" is forbidden: User "system:serviceaccount:eigr-functions:eigr-functions-controller" cannot patch resource "horizontalpodautoscalers" in API group "autoscaling" in the namespace "default"

You have to configure RBAC correctly!

Thanks for answer @mruoss. The more question is how configure RBAC on bonny correctly?

[mruoss]

There is no RBAC configuration for bonny. The configuration of RBAC depends on the operator you're implementing. Your operator runs as a specific service account. This service account needs permissions to do what your operator needs to do.

You can use @rule constants in your controllers if you're generating the manifest with bonny. Maybe also have a look at Cory's tutorial. Part 2 has info on RBAC.

[sleipnir]

I don't think that's it, who creates the kubernetes settings for me is Bonny, he via rule adds the RBACK settings for me. That's how I was able to add the other permissions to my operator. However for the HPA I could not create via rule what I need.

[sleipnir]

I left a link to my code here in this Issue where you can see that I added the @rule. I can change the manifest manually, but I don't want to have to.

[mruoss]

Oh I see. So... maybe a typo? => horizontalpodautoscaler vs horizontalpodautoscalers (singular vs plural). Compare the error msg and your rule.

[sleipnir]

The correct configuration for autoscaler is:

@rule {"autoscaling", ["horizontalpodautoscalers"], ["*"]}

@mruoss thanks for your attention