Forbidden errors when deploying Kubernetes clusters in new namespaces - VCF Automation

Products

• VCF Automation

Issue/Introduction

Symptoms:

• • Errors in VCFA UI: 
    • virtualmachines.vmoperator.vmware.com is forbidden: User "..." cannot list resource "virtualmachines"... in the namespace "...".
    • clusters.cluster.x-k8s.io is forbidden: User "..." cannot list resource "clusters"... in the namespace "...".
  • Manual check on the Supervisor via kubectl get rolebinding -n <namespace> returns "No resources found."

Environment

VCF Automation 9.x

Supervisor 9.0.x

Cause

Synchronization failure between Supervisor and VCFA resulting in missing RoleBindings for newly created namespaces.

Resolution

Update Supervisor to version v1.32.9+vmware.2-fips-vsc9.0.2.0100-25262241 or later.