Kubernetes fails to create loadbalancer on gce. Required 'compute.instances.list' permission

393 Views Asked by At

When I try to expose a deployment on kubernetes using

kubectl expose deployment NAME --target-port=80 --type=LoadBalancer

I see the following error when I run

kubectl describe service/NAME

Error creating load balancer (will retry): Failed to create load balancer for service default/NAME: googleapi: Error 403: Required 'compute.instances.list' permission for 'projects/PROJECT_NAME', forbidden

In the above PROJECT_NAME corresponds to my GCP project name.

Looking in the console GCE i see that the kubernetes instance is using the default service account. I checked the roles of the service account and it said "Editor", i tried adding the compute instance admin role. It didn't help.

Any ideas?

0

There are 0 best solutions below