You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "Mark Nuttall (Jira)" <ji...@apache.org> on 2022/04/27 09:52:00 UTC
[jira] [Updated] (FLINK-27425) Default job service account needs access to services to work with Kafka
[ https://issues.apache.org/jira/browse/FLINK-27425?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mark Nuttall updated FLINK-27425:
---------------------------------
Description:
FlinkDeployments using the `kafka` connector and default `flink` role fail with errors of the form,
[ERROR] Could not execute SQL statement. Reason:
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://10.96.0.1/api/v1/namespaces/default/services/basic-example-rest. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. services "basic-example-rest" is forbidden: User "system:serviceaccount:default:flink" cannot get resource "services" in API group "" in the namespace "default".
I have a simple fix and will submit a PR shortly.
> Default job service account needs access to services to work with Kafka
> -----------------------------------------------------------------------
>
> Key: FLINK-27425
> URL: https://issues.apache.org/jira/browse/FLINK-27425
> Project: Flink
> Issue Type: Bug
> Components: Kubernetes Operator
> Affects Versions: kubernetes-operator-0.1.0
> Reporter: Mark Nuttall
> Priority: Major
>
> FlinkDeployments using the `kafka` connector and default `flink` role fail with errors of the form,
>
> [ERROR] Could not execute SQL statement. Reason:
> io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://10.96.0.1/api/v1/namespaces/default/services/basic-example-rest. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. services "basic-example-rest" is forbidden: User "system:serviceaccount:default:flink" cannot get resource "services" in API group "" in the namespace "default".
>
> I have a simple fix and will submit a PR shortly.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)