Seeing the following errors when I attempt to do a terraform plan/apply
:
Error: secrets "xxx" is forbidden: User "system:anonymous" cannot get resource "secrets" in API group "" in the namespace "yyy"
There are a handful of such errors and each has the same format, each for a different resource. In each of the errors the API group is ""
(empty string).
No one else on my team is experiencing this issue. It feels like a kube config
or gcloud
credential isn’t working. But I’m able to get
and describe
the same resources using kubectl get secret xxx
. The plan is able to access the vast majority of resources except for a small handful.
I’ve tried resetting my gcloud
auth, reconfiguring my kube config
and recreating my credential used for reading and writing state to our terraform gcp project. None of those changes have had any affect. The only thing I can think that I’ve recently done is run terraform init
from another repo. But in my current repo I’ve run rm -rf .terraform && terraform init
many times now to restore the state. Nothing has changed.
Not really sure how to debug this issue. Any help would be appreciated.
thanks!