The error is referring to something being broken in between metrics and the kube api server. kube:admin has full cluster admin rights always.
I think the payload is too old, we had this issue before(see https://bugzilla.redhat.com/show_bug.cgi?id=1674372#c4), but now it is fixed Can you check $ oc get clusterversion my env: $ oc whoami kube:admin $ oc api-resources NAME SHORTNAMES APIGROUP NAMESPACED KIND bindings true Binding componentstatuses cs false ComponentStatus configmaps cm true ConfigMap endpoints ep true Endpoints events ev true Event limitranges limits true LimitRange namespaces ns false Namespace nodes no false Node persistentvolumeclaims pvc true PersistentVolumeClaim ........................................................... $ oc whoami kube:admin
Could get correct api-resources via # oc api-resources payload: 4.0.0-0.nightly-2019-03-28-030453
Hello, I have deployed again and the result is satisfactory: $ oc version oc v4.0.0-0.139.0 kubernetes v1.11.0+c69f926354 features: Basic-Auth GSSAPI Kerberos SPNEGO Server https://api.ocasalsa4015.rhcee.support:6443 kubernetes v1.12.4+8156b0c $ oc api-resources NAME SHORTNAMES APIGROUP NAMESPACED KIND bindings true Binding componentstatuses cs false ComponentStatus configmaps cm true ConfigMap endpoints ep true Endpoints events ev true Event limitranges limits true LimitRange namespaces ns false Namespace nodes no false Node persistentvolumeclaims pvc true PersistentVolumeClaim persistentvolumes pv false PersistentVolume pods po true Pod podtemplates true PodTemplate replicationcontrollers rc true ReplicationController resourcequotas quota true ResourceQuota secrets true Secret
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0758