[jira] [Commented] (FLINK-27425) Default job service account needs access to services to work with Kafka

["Mark Nuttall (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-27425?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17528781#comment-17528781 ] 

Mark Nuttall commented on FLINK-27425:
--------------------------------------

Please see https://github.com/apache/flink-kubernetes-operator/pull/186

> Default job service account needs access to services to work with Kafka
> -----------------------------------------------------------------------
>
>                 Key: FLINK-27425
>                 URL: https://issues.apache.org/jira/browse/FLINK-27425
>             Project: Flink
>          Issue Type: Bug
>          Components: Kubernetes Operator
>    Affects Versions: kubernetes-operator-0.1.0
>            Reporter: Mark Nuttall
>            Priority: Major
>              Labels: pull-request-available
>
> FlinkDeployments using the `kafka` connector and default `flink` role fail with errors of the form, 
>  
> [ERROR] Could not execute SQL statement. Reason:
> io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://10.96.0.1/api/v1/namespaces/default/services/basic-example-rest. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. services "basic-example-rest" is forbidden: User "system:serviceaccount:default:flink" cannot get resource "services" in API group "" in the namespace "default".
>  
> I have a simple fix and will submit a PR shortly. 



--
This message was sent by Atlassian Jira
(v8.20.7#820007)