ClusterRole don't have the privilege 'get', 'watch', 'list' on resource 'namespaces' of apiGroups '' on the querying cluster

Products

• VMware Tanzu Application Platform

Issue/Introduction

You are facing the error - One or more resources might be missing because of cluster query errors.

One or more resources might be missing because of cluster query errors.
Hide details
* Access error when querying cluster CLUSTER_NAME for resource 'v1/namespaces' (status: 403). Contact your administrator.

Cause

It indicates that ClusterRole don't have the privilege 'get', 'watch', 'list' on resource 'namespaces' of apiGroups '' on the querying cluster.

Resolution

To workaround this, add below code snippet in the tap-gui-viewer-service-account-rbac.yaml and apply yaml file on the querying cluster.

rules:
- apiGroups: ['']
  resources:
  - pods
  - pods/log
  - services
  - configmaps
  - limitranges
  - namespaces ### <-- add this line
  verbs: ['get', 'watch', 'list']

Please refer to doc: 

https://techdocs.broadcom.com/us/en/vmware-tanzu/standalone-components/tanzu-application-platform/1-12/tap/tap-gui-cluster-view-setup.html