Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When KIC is configured to use a single workspace and does not have the permission to access GET /status, KIC fails to create the workspaced client #6901

Open
1 task done
randmonkey opened this issue Dec 24, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@randmonkey
Copy link
Contributor

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

From FTI-6415.
Since KIC 2.11, The client will first run a GET /status to detect whether Kong gateway is ready to accept configuration, then create a workspaced client after the detect succeeded. So when KIC does not have the permission to access the GET /status (For example, It only have the admin permission in the configured workspace), the client can never be created.

Expected Behavior

When KIC only have permission of a single workspace, It should be OK to work with the workspace with workspace configured.

Steps To Reproduce

1. Deploy Kong gateway and create a workspace, like test
2. Create a token with super-admin permission in the single workspace created in (1)
3. Deploy KIC with workspace set to the workspace created in (1) and kong-admin-token set to the token in (2)

Kong Ingress Controller version

Since 2.11

Kubernetes version

Not relevant

Anything else?

No response

@randmonkey randmonkey added the bug Something isn't working label Dec 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant