kubeapps
kubeapps copied to clipboard
Kubeops cannot return a list of namespaces in additional clusters
Kubeops cannot return a list of namespaces in additional clusters where user has access only to own namespaces.
Kubeapps configuration:
- oidc provider(keycloak)
- separate oidc client for each cluster(audience configurated)
- 1 cluster with installed kubeapps
- 1 cluster with admin access
- 1 cluster with limited access(serviceToken configurated for cluster-admin SA) -
problem with displaying the list of namespaces
svcClientset
is not use service token for additional clusters because variable svcConfig
does not used:
https://github.com/vmware-tanzu/kubeapps/blob/11c87926d6cd798af72875d01437d15ae8d85b9a/pkg/kube/kube_handler.go#L333-L336
Solution:
svcClientset, err = a.clientsetForConfig(&svcConfig)
I rebuild kubeops with it, and problem has gone
Thanks for helping out @XenoAura!
After removing kubeops
, work has been done in #5286.