What is unknown user client in kubernetes?

0 votes

Kubectl isn't working as expected. I amd running it on my local shell with gcloud sdk. A simple command like:

$ kubectl get pod

gives me this error:

Error from server (Forbidden): pods is forbidden: User "client" cannot list pods at the cluster scope: Unknown user "client"

I can run the same command on GCP cloud shell with correct output

$ gcloud auth list


Credentialed Accounts
* foo@bar.com

I tried creating a clusterrolebinding, but the error still persists.

Sep 12, 2018 in Kubernetes by Atul
• 10,220 points

1 answer to this question.

Your answer

Your name to display (optional):
Privacy: Your email address will only be used for sending these notifications.
0 votes

I think your Legacy Authorisation has been disabled in cluster settings. The client certificate that you are using is a Legacy Authentication method. So your client authentication actually succeeds but the authorisation fails. So now you can either of the following things:

Try and disable the use of client certificate:

gcloud config unset container/use_client_certificate

And regenerate your kubectl config:

gcloud container clusters get-credentials my-cluster

OR the more simpler method being, enable Legacy Authorisation in the cluster settings in the Google Cloud Console.

answered Sep 12, 2018 by DareDev
• 6,670 points

Related Questions In Kubernetes

0 votes
1 answer

One user per node in kubernetes cluster

In your case with the information you've ...READ MORE

answered Oct 5, 2018 in Kubernetes by Kalgi
• 36,340 points
0 votes
2 answers
+1 vote
1 answer

Is autoscaling possible in kubernetes ingress nginx

In principle, the NGINX ingress controller is ...READ MORE

answered Oct 24, 2018 in Kubernetes by Kalgi
• 36,340 points
0 votes
1 answer

permissions related to AWS ECR

if you add allowContainerRegistry: true, kops will add those permissions ...READ MORE

answered Oct 9, 2018 in Kubernetes by Kalgi
• 36,340 points
0 votes
1 answer
0 votes
3 answers

Error while joining cluster with node

Hi Kalgi after following above steps it ...READ MORE

answered Jan 17 in Others by anonymous
0 votes
1 answer
0 votes
3 answers

Using multiple commands in a kubernetes yaml file

Try something like this: containers: - name: ...READ MORE

answered Apr 23 in Kubernetes by lyza

© 2018 Brain4ce Education Solutions Pvt. Ltd. All rights Reserved.
"PMP®","PMI®", "PMI-ACP®" and "PMBOK®" are registered marks of the Project Management Institute, Inc. MongoDB®, Mongo and the leaf logo are the registered trademarks of MongoDB, Inc.