Lacking pod command execution privileges

[CapKenR]

I'm looking at "Service Reachability From IngressGateway" (after looking through the other Istio Ingress Recipes before that one) and for each of the services I selected, it says "Lacking pod command execution privileges". Looking at the debug output, I see the following.

Error: Command failed: kubectl get services --context ucp_test-ucp.lab.capstonec.net:6443_admin -o jsonpath='{range .items[*]}{"\n"}{.metadata.namespace}{" "}{.metadata.name}{" "}{.spec.clusterIP}{" "}{range .spec.ports[*]}{.port}{" "}{end}{end}'  --all-namespaces
error: a resource cannot be retrieved by name across all namespaces


    at ChildProcess.exithandler (child_process.js:299)
    at ChildProcess.emit (events.js:182)
    at maybeClose (internal/child_process.js:962)
    at Process.ChildProcess._handle.onexit (internal/child_process.js:251)
renderer.js:1212 kubectl is not accessible

If I run the above kubectl command from the command line, I get the same error. If I remove the jsonpath output, I get the list of all services in all namespaces.

[CapKenR]

I've since gotten the same message from other recipes with the same message in the debug console.

[uk000]

Thanks for finding this. I think the generated kubectl command for some of these recipes might have an issue. Will look into it.