romil
04/12/2022, 8:59 AMapiVersion: v1
kind: ServiceAccount
metadata:
name: spicedb
namespace: authz
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
namespace: authz
name: watch-service
rules:
- apiGroups: [""] # "" indicates the core API group
resources: ["endpoints"]
verbs: ["get", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: spicedb-watch-service
namespace: authz
subjects:
- kind: ServiceAccount
name: spicedb
roleRef:
kind: Role
name: watch-service
apiGroup: rbac.authorization.k8s.io
I still get below error :
kuberesolver: watching ended with error='invalid response code 403 for service spicedb in namespace authz', will reconnect again