want to get nodes through workflows

[nishit93-hub]

Hi There,

I trying to get nodes through workflows. I am getting this error

Error from server (Forbidden): nodes is forbidden: User "system:serviceaccount:argo:internal-kubectl" cannot list resource "nodes
" in API group "" at the cluster scope

Even though I have added the RBAC rule to list nodes. Below is the RBAC rule

apiVersion: v1
kind: ServiceAccount
metadata:
  name: internal-kubectl
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: modify-pods
rules:
  - apiGroups: [""]
    resources:
      - pods
    verbs:
      - get
      - list
      - delete
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: modify-pods-to-sa
subjects:
  - kind: ServiceAccount
    name: internal-kubectl
roleRef:
  kind: Role
  name: modify-pods
  apiGroup: rbac.authorization.k8s.io 

[vfarcic]

Sorry for not responding earlier... The notification about this issue got buried in my mailbox.

Are you following one of my Gists or changing the manifests for your needs? If it's the former, can you please let me know which one it is (I tend to use repos for many different purposes). If it's the latter, could you create a Gist so that I try to reproduce it?

[nishit93-hub]

No issue, I had resolved the issue by changing the Kind to cluster role and ClusterRoleBinding. Thanks