<p>I'm trying to set up a cluster Autoscaler for my kubernetes cluster and when I'm looking at the autoscaler logs im seeing these error messages:</p>
<pre><code>1 reflector.go:138] k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User &quot;system:serviceaccount:kube-system:cluster-autoscaler&quot; cannot list resource &quot;csidrivers&quot; in API group &quot;storage.k8s.io&quot; at the cluster scope
E0922 10:14:33.794709       1 reflector.go:138] k8s.io/client-go/informers/factory.go:134: Failed to watch *v1beta1.CSIStorageCapacity: failed to list *v1beta1.CSIStorageCapacity: csistoragecapacities.storage.k8s.io is forbidden: User &quot;system:serviceaccount:kube-system:cluster-autoscaler&quot; cannot list resource &quot;csistoragecapacities&quot; in API group &quot;storage.k8s.io&quot; at the cluster scope
I0922 10:14:35.491641       1 reflector.go:255] Listing and watching *v1.Namespace from k8s.io/client-go/informers/factory.go:134
E0922 10:14:36.196200       1 reflector.go:138] k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Namespace: failed to list *v1.Namespace: namespaces is forbidden: User &quot;system:serviceaccount:kube-system:cluster-autoscaler&quot; cannot list resource &quot;namespaces&quot; in API group &quot;&quot; at the cluster scope
</code></pre>
<p>Anyone might have a clue what might be the issue?</p>
<p>Thanks</p>

Steve Spiteri
<p>Just make sure <strong>cluster-autoscaler</strong> has permission to use the resource <strong>csidrivers</strong> you can edit the RBAC and add the access for <code>storage.k8s.io</code></p>
<p>Edit cluster role with this</p>
<pre><code>- apiGroups:
  - storage.k8s.io
  resources:
  - storageclasses
  - csinodes
  - csidrivers
  - csistoragecapacities
  verbs:
  - watch
  - list
  - get
</code></pre>
