Message Title

Gerard Ryan created an issue

Issue Type:	Bug
Affects Versions:	3.0.0-alpha
Assignee:	Unassigned
Attachments:	image-2019-08-01-12-44-40-604.png
Created:	01/Aug/19 7:55 AM
Labels:	team-service-2
Priority:	Major
Reporter:	Gerard Ryan

Request: GET https://<cluster>/apis/mobile.k8s.io/v1alpha1/namespaces/agms-583/mobileclients

Respo! nse:

 
                                                                {
  "kind": "Status",
  "apiVersion": "v1",
  "metadata": {
    
  },
  "status": "Failure",
  "message": "mobileclients.mobile.k8s.io is forbidden: User \"evals11\" cannot list mobileclients.mobile.k8s.io in the namespace \"agms-583\": no RBAC policy matched",
  "reason": "Forbidden",
  "details": {
    "group": "mobile.k8s.io",
    "kind": "mobileclients"
  },
  "code": 403
}
 
                                                            

Given that this is a project that my user has just created, I wouldn't expect to see an error such as this for any kinds. I'm not sure why it's happening for this kind and not for our other custom resource kinds.

I can see a related successful request there also:

Request: GET https://<cluster>/apis/mobile.k8s.io/v1alpha1
Response:

 
                                                                {
  "kind": "APIResourceList",
  "apiVersion": "v1",
  "groupVersion": "mobile.k8s.io/v1alpha1",
  "resources": [
    {
      "name": "mobileclients",
      "singularName": "mobileclient",
      "namespaced": true,
      "kind": "MobileClient",
      "verbs": [
        "delete",
        "deletecollection",
        "get",
        "list",
        "patch",
        "create",
        "update",
        "watch"
      ],
      "shortNames": [
        "mc"
      ]
    }
  ]
}
 
                                                            

I see similar requests for other groupVersions than the one in the second request listed here, but there's no corresponding request similar to the first one after (get mobileclients in this namespace).

Add Comment

This message was sent by Atlassian Jira