kubesphere / kubesphere/ks-devops
凭证管理员无法添加kubeconfig类型凭证
- Dominant language
- Go
- Stars
- 164
- Forks
- 140
- PR merge metrics
- No merged PRs in 30d
Description
### What is version of KubeSphere DevOps has the issue?
v1.1.3
### How did you install the Kubernetes? Or what is the Kubernetes distribution?
官方kk工具安装
### What happened?
DevOps项目 `admin` 角色无法创建 `kubeconfig` 类型凭证,类型下拉选项中无对应选项。
请求地址`/apis/kubesphere.io/v1alpha1/installplans/devops`返回
```json
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"message": "installplans.kubesphere.io \"devops\" is forbidden: User \"tuzy\" cannot get resource \"installplans\" in API group \"kubesphere.io\" at the cluster scope",
"reason": "Forbidden",
"details": {
"name": "devops",
"group": "kubesphere.io",
"kind": "installplans"
},
"code": 403
}
```
### Relevant log output
```shell
```
### Additional information
```markdown
```
Contributor guide
Research direction
Reproduce the missing kubeconfig credential option for a DevOps project admin and inspect the `/apis/kubesphere.io/v1alpha1/installplans/devops` request, especially its 403 response. Trace the permission or capability data used to populate credential types. Done means an admin can see and create a kubeconfig credential without the forbidden installplans error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- authorization, devops
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100