psc-autoscaler RBAC Permissions — SaaS

In order to take the automated actions, to keep your K8s environment optimized, our psc-autoscaler requires the below permissions.

{% @github-files/github-code-block url="https://github.com/perfectscale-io/perfectscale-io.github.io/blob/3e421156a29096d4a668febccb662117b8110ae2/charts/psc-autoscaler/templates/clusterrole.yaml" visible="true" %}

settings.allowNamespaceCreation Helm value is enabled by default. When enabled, this permission allows the autoscaler to create target namespaces required for cross-namespace ephemeral workload automation. To opt out of automatic namespace creation, set settings.allowNamespaceCreation=false when installing PerfectScale automation agent.

helm upgrade --install -n perfectscale psc-autoscaler \
      --set secret.create=false \
      --set settings.allowNamespaceCreation=false \
      perfectscale/psc-autoscaler

Caution

If settings.allowNamespaceCreation is disabled, cross-namespace ephemeral workload grouping will not work as expected for newly created ephemeral namespaces. You will need to manually create or configure each required namespace so automation can be applied.