cannot get resource "jobs" in API group "batch" in the namespace "default"

[cfra]

cannot get resource "jobs" in API group "batch" in the namespace "default"

[cfra]

To provide a bit more info than in #39 the proper solution seems to configure a service account with the appropriate permissions:

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: my-app
  namespace: default
rules:
  - verbs:
      - list
      - watch
      - get
    apiGroups:
      - batch
    resources:
      - jobs
    resourceNames:
      - my-app-migration-3bd734abb2cda61f3545529f3dca40401
---
kind: ServiceAccount
apiVersion: v1
metadata:
  name: my-app
  namespace: default
automountServiceAccountToken: true
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: my-app
subjects:
  - kind: ServiceAccount
    name: my-app
    namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: my-app

In the template of the deployment where I am running the k8s-wait-for container, I can now set the service account to my-app and get the proper permissions.