generated from amazon-archives/__template_Apache-2.0
-
Notifications
You must be signed in to change notification settings - Fork 271
Closed
Description
Describe the bug
Mismatch between ClusterRole name and reference in ClusterRoleBinding for namespace cache
Steps to reproduce
- Modify the
<fullname>-namespace-cachesClusterRoleBinding to add a User (with no other bindings) as a subject - Assume this user identity
- Run
kubectl get namespacesand observe this errorError from server (Forbidden): namespaces is forbidden: User "..." cannot list resource "namespaces" in API group "" at the cluster scope: RBAC: clusterrole.rbac.authorization.k8s.io "ack-lambda-controller-lambda-chart-namespace-caches" not found
Expected outcome
User is able to list and view namespaces, by being bound to the <fullname>-namespaces-cache ClusterRole
Diagnosis
The ClusterRole is named <fullname>-namespaces-cache, whereas the roleRef in the ClusterRoleBinding points to <fullname>-namespace-caches (note the difference in pluralization).
Environment
- Kubernetes version: 1.31
- Using EKS: yes,
eks.32 - AWS service targeted: lambda
Metadata
Metadata
Assignees
Labels
No labels