{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13097","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13097/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13097/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13097/events","html_url":"https://github.com/kubernetes/kubernetes/issues/13097","id":102816344,"number":13097,"title":"kubectl does not work with namespace authorization.","user":{"login":"f-higashi","id":8746742,"avatar_url":"https://avatars.githubusercontent.com/u/8746742?v=3","gravatar_id":"","url":"https://api.github.com/users/f-higashi","html_url":"https://github.com/f-higashi","followers_url":"https://api.github.com/users/f-higashi/followers","following_url":"https://api.github.com/users/f-higashi/following{/other_user}","gists_url":"https://api.github.com/users/f-higashi/gists{/gist_id}","starred_url":"https://api.github.com/users/f-higashi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/f-higashi/subscriptions","organizations_url":"https://api.github.com/users/f-higashi/orgs","repos_url":"https://api.github.com/users/f-higashi/repos","events_url":"https://api.github.com/users/f-higashi/events{/privacy}","received_events_url":"https://api.github.com/users/f-higashi/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/support","name":"kind/support","color":"eb6420"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/ux","name":"team/ux","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-08-24T15:14:19Z","updated_at":"2015-09-07T08:16:54Z","closed_at":null,"body":"I created policy.jsonl\r\n```\r\n{\"user\":\"alice\", \"namespace\": \"projectCaribou\"}\r\n```\r\n\r\nAnd I tried to get pods by kubectl.\r\n```\r\n$ kubectl get po --username=alice --password=password --server=https://localhost:6443 --insecure-skip-tls-verify=true\r\nerror: couldn't read version from server: the server does not allow access to the requested resource\r\n```\r\nAt first, kubectl seems to access https://localhost:6443/api/ and fail because the \"alice\" can only have access on https://localhost:6443/api/v1/namespaces/projectCaribou.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/138228471","html_url":"https://github.com/kubernetes/kubernetes/issues/13097#issuecomment-138228471","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/13097","id":138228471,"user":{"login":"mkulke","id":273280,"avatar_url":"https://avatars.githubusercontent.com/u/273280?v=3","gravatar_id":"","url":"https://api.github.com/users/mkulke","html_url":"https://github.com/mkulke","followers_url":"https://api.github.com/users/mkulke/followers","following_url":"https://api.github.com/users/mkulke/following{/other_user}","gists_url":"https://api.github.com/users/mkulke/gists{/gist_id}","starred_url":"https://api.github.com/users/mkulke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mkulke/subscriptions","organizations_url":"https://api.github.com/users/mkulke/orgs","repos_url":"https://api.github.com/users/mkulke/repos","events_url":"https://api.github.com/users/mkulke/events{/privacy}","received_events_url":"https://api.github.com/users/mkulke/received_events","type":"User","site_admin":false},"created_at":"2015-09-07T08:16:54Z","updated_at":"2015-09-07T08:16:54Z","body":"Is there a fix/workaround for 1.0 conceivable, or is this an architectural issue? i'd like to give users access to specific namespaces via kubectl w/o exposing everything."}}