Skip to content

Error when accessing (RBAC) to the endpointslices resource in version v3.10.0 #5844

Open
@juanjoku

Description

@juanjoku

We have tested the new v3.10 version, installing it using the YAMLs available at https://app.getambassador.io/yaml/emissary/3.10.0/emissary-emissaryns.yaml (we have not used HELM).

There are errors in logs:

reflector.go:166
"Unhandled Error" 
err="pkg/kates/client.go:469: Failed to watch *unstructured.Unstructured: 
can't watch endpointslices.v1.discovery.k8s.io: forbidden" logger="UnhandledError"

Indeed, YAML/RBACs do not enable access to this newly incorporated resource.

It is missing, of course, something similar to this (I don't know if these verbs are sufficient):

- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - get
  - list
  - watch

Metadata

Metadata

Assignees

No one assigned

    Labels

    t:bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions