<p>I used the following guide to set up my chaostoolkit cluster: <a href="https://chaostoolkit.org/deployment/k8s/operator/" rel="nofollow noreferrer">https://chaostoolkit.org/deployment/k8s/operator/</a></p>
<p>I am attempting to kill a pod using kubernetes, however the following error:</p>
<pre><code>HTTP response body: {&quot;kind&quot;:&quot;Status&quot;,&quot;apiVersion&quot;:&quot;v1&quot;,&quot;metadata&quot;:{},&quot;status&quot;:&quot;Failure&quot;,&quot;message&quot;:&quot;pods is forbidden: User \&quot;system:serviceaccount:chaostoolkit-run:chaostoolkit-b3af262edb\&quot; cannot list resource \&quot;pods\&quot; in API group \&quot;\&quot; in the namespace \&quot;task-dispatcher\&quot;&quot;,&quot;reason&quot;:&quot;Forbidden&quot;,&quot;details&quot;:{&quot;kind&quot;:&quot;pods&quot;},&quot;code&quot;:403}
</code></pre>
<p>I set my serviceAccountName to an RBAC that I created but for some reason my kubernetes defaults to &quot;system:serviceaccount:chaostoolkit-run:chaostoolkit-b3af262edb&quot;.</p>
<pre><code>apiVersion: v1
kind: ConfigMap
metadata:
  name: my-chaos-exp
  namespace: chaostoolkit-run
data:
  experiment.yaml: | 
    ---
    version: 1.0.0
    title: Terminate Pod Experiment
    description: If a pod gets terminated, a new one should be created in its place in a reasonable amount of time.
    tags: [&quot;kubernetes&quot;]
    secrets: 
      k8s:
        KUBERNETES_CONTEXT: &quot;docker-desktop&quot;
    method:
    - type: action
      name: terminate-k8s-pod
      provider:
        type: python
        module: chaosk8s.pod.actions
        func: terminate_pods
        arguments:
          label_selector: ''
          name_pattern: my-release-rabbitmq-[0-9]$
          rand: true
          ns: default
---
apiVersion: chaostoolkit.org/v1
kind: ChaosToolkitExperiment
metadata:
  name: my-chaos-exp
  namespace: chaostoolkit-crd
spec:
  serviceAccountName: test-user
  automountServiceAccountToken: false
  pod:
    image: chaostoolkit/chaostoolkit:full
    imagePullPolicy: IfNotPresent
    experiment:
      configMapName: my-chaos-exp
      configMapExperimentFileName: experiment.yaml
  restartPolicy: Never
</code></pre>

Kenny Jefferson
<p>Error which is shared is using default service account &quot;choastoolkit&quot;. Look like the role associated might not proper permissions.</p>
<p>The service account &quot;test-user&quot; which is been used in ChaosToolkitExperiment   defintion should have proper role access to delete pod.</p>
<p>Please specify proper service account having proper role access.</p>
