headlamp-k8s / headlamp

A Kubernetes web UI that is fully-featured, user-friendly and extensible
https://headlamp.dev
Apache License 2.0
2.22k stars 156 forks source link

Сan't log in with a limited user token #2385

Closed fatsolko closed 2 weeks ago

fatsolko commented 2 weeks ago

I create a token for a limited user and use it to log in to the default kube dashboard, pods in the namespace are visible and everything is ok. kubectl create token developer-service-account -n ${NAMESPACE} image But when I try to use the same token to log in via a headlamp, I get an error in the pods for the same namespace Error: No permissions image If I use admin token in headlamp, everything works as it should. image

fatsolko commented 2 weeks ago

I cannot access any section in my cluster, it keeps saying Access Denied. By default, Headlamp assumes users can list all namespaces. If you only have the permissions to list resources in certain namespaces, please access the cluster settings and set up the accessible namespaces.