Cannot Connect to AKS Cluster from Dev Laptop

[nickward13]

I'm trying to connect to an RBAC enabled AKS cluster using the recommended code from the README.md, along with a request to list the pods in the default namespace:

var config = KubernetesClientConfiguration.BuildConfigFromConfigFile();
var client = new Kubernetes(config);
client.ListNamespacedPod("default");

The client.ListNamespacedPod command throws an exception "Microsoft.Rest.HttpOperationException: Operation returned an invalid status code 'Forbidden'", with a response content of "pods is forbidden: User "clusterUser" cannot list pods in the namespace "default"". Using the same config file via kubectl retrieves a list of pods successfully.

Is this related to the known issue mentioned in the README.md - "Not all auth providers are supported at moment #91", or is it an additional error? The code appears to connect, but seems to be using a low privelege user account. I couldn't find a suitable issue covering this. Any suggestions would be great.

[brendandburns]

@nickward13 what is in your kubeconfig file? is it certificate based auth? Or is it AAD based auth?

I will try to repro.

Thanks!

[nickward13]

Thanks @brendandburns. Its certificate based auth - not AAD.

[nickward13]

FYI - as per issue #176, I've lost access to the original AKS cluster I had this error on. I've tried to reproduce on another cluster, and have been unable to. Connectivity just works as expected...

[brendandburns]

Closing this since we can't seem to reproduce.