<p>I have the following error message:</p>
<blockquote>
<p>User &quot;system:serviceaccount:qserv:argo-workflow&quot; cannot create resource &quot;jobs&quot; in API group &quot;batch&quot; in the namespace &quot;qserv&quot;</p>
</blockquote>
<p>Here is the related <code>Role</code>:</p>
<pre><code>kubectl describe role argo-workflows-workflow
Name:         argo-workflows-workflow
Labels:       app.kubernetes.io/managed-by=Helm
Annotations:  meta.helm.sh/release-name: argo-workflows
              meta.helm.sh/release-namespace: qserv
PolicyRule:
  Resources  Non-Resource URLs  Resource Names  Verbs
  ---------  -----------------  --------------  -----
  pods       []                 []              [get watch patch]
  pods/log   []                 []              [get watch]
</code></pre>
<p>Could you please provide the correct <code>kubectl patch</code> command which would allow the <code>argo-workflows-workflow</code> role to create <code>Jobs</code>?</p>

Fabrice Jammes
<p>This command does the job and allow to run the argo workflow successfully:</p>
<pre><code>kubectl patch roles.rbac.authorization.k8s.io argo-workflows-workflow --type='json' -p='[{&quot;op&quot;: &quot;add&quot;, &quot;path&quot;: &quot;/rules/-&quot;, &quot;value&quot;: {&quot;apiGroups&quot;: [&quot;batch&quot;],&quot;resources&quot;: [&quot;jobs&quot;],&quot;verbs&quot;: [&quot;create&quot;, &quot;get&quot;, &quot;watch&quot;]} }]
</code></pre>
