{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/39722","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/39722/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/39722/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/39722/events","html_url":"https://github.com/kubernetes/kubernetes/issues/39722","id":200031761,"number":39722,"title":"User \"system:anonymous\" cannot proxy services in the namespace \"default\".","user":{"login":"foxish","id":906471,"avatar_url":"https://avatars2.githubusercontent.com/u/906471?v=3","gravatar_id":"","url":"https://api.github.com/users/foxish","html_url":"https://github.com/foxish","followers_url":"https://api.github.com/users/foxish/followers","following_url":"https://api.github.com/users/foxish/following{/other_user}","gists_url":"https://api.github.com/users/foxish/gists{/gist_id}","starred_url":"https://api.github.com/users/foxish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/foxish/subscriptions","organizations_url":"https://api.github.com/users/foxish/orgs","repos_url":"https://api.github.com/users/foxish/repos","events_url":"https://api.github.com/users/foxish/events{/privacy}","received_events_url":"https://api.github.com/users/foxish/received_events","type":"User","site_admin":false},"labels":[{"id":357119284,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/sig/auth","name":"sig/auth","color":"d2b48c","default":false},{"id":450823910,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/sig/cli","name":"sig/cli","color":"d2b48c","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":15,"created_at":"2017-01-11T08:33:51Z","updated_at":"2017-05-06T17:11:25Z","closed_at":null,"body":"**What keywords did you search in Kubernetes issues before filing this one?** (If you have found any duplicates, you should instead reply there.): User \"system:anonymous\" cannot proxy services in the namespace \"default\".\r\n\r\n**Kubernetes version** (use `kubectl version`):\r\n```\r\n~kubectl version --short\r\nClient Version: v1.6.0-alpha.0.2996+add3a08a6d3648\r\nServer Version: v1.6.0-alpha.0.2996+add3a08a6d3648\r\n```\r\n\r\n**Environment**:\r\n- **Cloud provider or hardware configuration**: GCE\r\n\r\n**What happened**:\r\nUnable to access services via the proxy endpoint.\r\n\r\n**What you expected to happen**:\r\nThe service to be accessible via /api/v1/proxy/...\r\n\r\n**How to reproduce it** (as minimally and precisely as possible):\r\n- Check out sources from HEAD\r\n- make quick-release\r\n- cluster/kube-up.sh\r\n\r\nCannot access any service via the proxy (see kubectl cluster-info for some examples), for example:\r\n```\r\n~ curl -k https://<server>/api/v1/proxy/namespaces/kube-system/services/kubernetes-dashboard\r\nUser \"system:anonymous\" cannot proxy services in the namespace \"kube-system\".\r\n```\r\n**Anything else do we need to know**:\r\nThis is a regression from 1.5.1.\r\n\r\n\r\n/cc @kubernetes/sig-auth-misc @kubernetes/sig-network-misc \r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/299653458","html_url":"https://github.com/kubernetes/kubernetes/issues/39722#issuecomment-299653458","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/39722","id":299653458,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars3.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2017-05-06T17:11:25Z","updated_at":"2017-05-06T17:11:25Z","body":"The best way to access the dashboard if you want to go through the API proxy is to run `kubectl proxy` locally and access http://localhost:8001/ui"}}
{"actor":{"display_login":"liggitt"}}