@jaiganeshjk 

Hello @Ali Kanso 

Thank you for using K10 community!

Please are you performing this operation with a admin user or a basic user ?

Also if you try to check the apis using kubectl with the same user on kubernetes cluster what is the output:

kubectl get apiservices | grep kasten
kubectl api-resources

Rubens

Hello @FRubens,

i am performing this action using K10-K10 sa created by Kasten during the installation, and this service account uses the same cluster role as the system:admin user.

when i run “kubectl api-resources”, i get the same errors: “Failed to list APIResources...:Unauthorized”

i think it’s related to the clusterrole, but the clusterrole there is “cluster-admin” with full privileges. 

 Thanks for the information @Ali Kanso.

Please which k8s cluster are you running K10 is it OCP (Openshift) or other environment ?

yeah, it’s OCP with version 3.11, Kasten 4.0.2 is installed for migration purpose.

Thanks.

Please checking on RedHat for OCP 3.11 it might be that metrics-server has some issues if i.e. you have redeployed  certificates, I would recommend following the instructions in the link below, where it is scaling down/up the metrics-server (but would be the same for any other api group) on openshift-metrics-server project, please check the link below and see if it could help in your case:

https://access.redhat.com/solutions/4765881

After that on K10 side, please rollout config.svc and aggregatedapis-svc:

oc rollout restart -n kasten-io deployment/aggregatedapis-svc
oc rollout restart -n kasten-io deployment/config-svc

Let me know the output.

Regards

Rubens

Hello

I would also recommend seeing if you can run even K10 API commands. 

kubectl auth can-i get apiservices

and 

kubectl auth can-i get policies

If this says no then you do not have RBAC permissions to access these API’s

but so far I would say this is likey the account you are logged in lack’s RBAC permissions to even list api-resources or token is invalid.

Thanks

Emmanuel