soluble-ai / kubetap

Kubectl plugin to interactively proxy Kubernetes Services with ease
https://soluble-ai.github.io/kubetap/
Apache License 2.0
548 stars 44 forks source link

Cannot list resource "namespaces" in API group "" at the cluster scope #22

Open tzieleniewski opened 1 year ago

tzieleniewski commented 1 year ago

Description

When tapping a service with the --namespace parameter tap is still trying to access all namespaces. in our situation this is a blocker issue as we have limited access to K8s API outside our namespace. Is there a way to enforce only namespace scope, instead of cluster, for all calls.

kubectl tap on --namespace test -p 8080 service

Error: error fetching namespaces: namespaces is forbidden: User "system:serviceaccount:...:..." cannot list resource "namespaces" in API group "" at the cluster scope

script returned exit code 1

Screenshots or other information

Kubernetes client version: v1.26.0