kubesphere / kubesphere/ks-devops

凭证管理员无法添加kubeconfig类型凭证

Open
#1,060 0 comments 0 reactions 0 assignees View on GitHub
kind/bug
Dominant language
Go
Stars
164
Forks
140
PR merge metrics
No merged PRs in 30d

Description

### What is version of KubeSphere DevOps has the issue?

v1.1.3

### How did you install the Kubernetes? Or what is the Kubernetes distribution?

官方kk工具安装

### What happened?

DevOps项目 `admin` 角色无法创建 `kubeconfig` 类型凭证,类型下拉选项中无对应选项。

请求地址`/apis/kubesphere.io/v1alpha1/installplans/devops`返回
```json

{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"message": "installplans.kubesphere.io \"devops\" is forbidden: User \"tuzy\" cannot get resource \"installplans\" in API group \"kubesphere.io\" at the cluster scope",
"reason": "Forbidden",
"details": {
"name": "devops",
"group": "kubesphere.io",
"kind": "installplans"
},
"code": 403
}

```

Image

Image

### Relevant log output

```shell

```

### Additional information

```markdown

```

Contributor guide

Open the contributing guide

Research direction

Reproduce the missing kubeconfig credential option for a DevOps project admin and inspect the `/apis/kubesphere.io/v1alpha1/installplans/devops` request, especially its 403 response. Trace the permission or capability data used to populate credential types. Done means an admin can see and create a kubeconfig credential without the forbidden installplans error.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes
Domain
authorization, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.