Hello,

This role should be added in the cluster role of Rancher and not on the downstream cluster.

You can follow this other article where I talk about the cluster roles for Rancher for the autoscaler.
https://www.dbi-services.com/blog/rancher-rke2-rancher-roles-for-cluster-autoscaler/
Here I was using an admin account, therefore the token used already have all the permissions. That’s why I skipped that part.

I had followed carefully your steps, however I’ve encountered an issue in autoscaler pods, it says:

│ I0607 20:53:54.304401 1 cloud_provider_builder.go:29] Building rancher cloud provider. │
│ F0607 20:53:54.522891 1 rancher_provider.go:69] failed to create rancher cloud provider: failed to find API group “cluster.x-k8s.io”

I have added to my ClusterRole, according to this new docs: https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/cloudprovider/rancher/README.md:
“`
– apiGroups: [“provisioning.cattle.io”]
resources: [“clusters”]
verbs: [“get”, “update”]
– apiGroups: [“cluster.x-k8s.io”]
resources: [“machines”]
verbs: [“list”]
“`

However, it stays the same state.

My RKE2 is v1.28.9 +rke2r1.

Any help will be appreciated, thanks!