feat: remove cluster role requirement for list namespaces

Author: linfan

docs/deploy/rbac/all-commands-mini.yaml

@@ -1,17 +1,5 @@
 # minimal permission role for all kt commands can run
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kt-cluster-role
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - namespaces
-    verbs:
-      - list
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: kt-role

docs/deploy/rbac/connect-only-mini.yaml

@@ -1,17 +1,5 @@
 # minimal permission role for connect command can run
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kt-cluster-role
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - namespaces
-    verbs:
-      - list
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: kt-role

pkg/kt/service/dns/dns_darwin.go

@@ -29,10 +29,15 @@ func (s *Cli) SetNameServer(dnsServer string) error {
 		return err
 	}
 	go func() {
+		var nsList []string
 		namespaces, err := cluster.Ins().GetAllNamespaces()
 		if err != nil {
-			dnsSignal <-err
-			return
+			log.Info().Msgf("Cannot list all namespaces, set dns for '%s' only", opt.Get().Global.Namespace)
+			nsList = append(nsList, opt.Get().Global.Namespace)
+		} else {
+			for _, ns := range namespaces.Items {
+				nsList = append(nsList, ns.Name)
+			}
 		}
 
 		preferredDnsInfo := strings.Split(dnsServer, ":")
@@ -43,8 +48,8 @@ func (s *Cli) SetNameServer(dnsServer string) error {
 		}
 
 		createResolverFile("local", opt.Get().Connect.ClusterDomain, dnsIp, dnsPort)
-		for _, ns := range namespaces.Items {
-			createResolverFile(fmt.Sprintf("%s.local", ns.Name), ns.Name, dnsIp, dnsPort)
+		for _, ns := range nsList {
+			createResolverFile(fmt.Sprintf("%s.local", ns), ns, dnsIp, dnsPort)
 		}
 		dnsSignal <- nil