k8s.Autorest.HttpOperationException: Operation returned an invalid status code 'Forbidden'

[dmachine7]

Hi folks,

I have a container hosted as pod inside a cluster.
I want to use config maps and secrets from "xyz" namespace in cluster.

I am trying to get cluster config like this.
var k8sConfig = KubernetesClientConfiguration.InClusterConfig();

But getting exception
k8s.Autorest.HttpOperationException: Operation returned an invalid status code 'Forbidden'

Am I doing it incorrectly or is this some bug?
Please guide me to a solution or workaround to this.

Thank you.

[dmachine7]

Please note: I am using token login from web UI for cluster dashboard

[brendandburns]

Chances are that the default service account for your pod doesn't have the right RBAC permissions.

InClusterConfig() uses the default pod service account

You can read more details about service accounts here:

https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/

[tg123]

To add, you can debug the permission with kubectl auth can-i