vmware-archive/kubewatch

cannot list resource on Google Kubenestes Engine

Opened this issue · 2 comments

jackkwok commented

github.com/bitnami-labs/kubewatch/pkg/controller/controller.go:466: Failed to list *v1.Namespace: namespaces is forbidden: User "system:serviceaccount:default:kubewatch" cannot list resource "namespaces" in API group "" at the cluster scope

I followed the Kubectl RBAC instructions step by step but still received the above error. Please help.

gennway commented

have you found the solution?

cthulhu666 commented

@jackkwok you have to edit yaml file that contains ClusterRole

rules:
  - apiGroups: [""]
    resources: ["pods", "replicationcontrollers", "namespaces", "deployments", "services"] # <--- add resources here
    verbs: ["get", "watch", "list"]