AWX Service Account Permissions Other Namespaces

Archives AWX Project
1

I’m trying to run the command module as follows:

command: kubectl scale deployment -n logdemo myDeployment --replicas=2

I’m getting this error: User "system:serviceaccount:awx:awx" cannot get resource "deployments" in API group "apps" in the namespace "logdemo"

How do I give the awx user additional permissions for the logdemo namespace?

2

I believe you need to create a Rolebinding for ‘awx’ serviceaccount in order for it to access logdemo namespace resources.
See follow example below.
https://stackoverflow.com/questions/53960516/can-i-connect-one-service-account-to-multiple-namespaces-in-kubernetes