Does anyone know this issue GKE forbidden io.k8s.core.v1.configmaps.list operation?

General Discussions
1

Hi Everyone,

I have already search this issue over the internet and no result can justify where the issue is come. Below I attach the block of that log :

 "protoPayload": {
        "requestMetadata": {
          "callerSuppliedUserAgent": "clustermetrics",
          "callerIp": "::1"
        },
        "authorizationInfo": [
          {
            "resource": "core/v1/namespaces/kube-system/configmaps",
            "permission": "io.k8s.core.v1.configmaps.list",
            "resourceAttributes": {}
          }
        ],
        "@type": "type.googleapis.com/google.cloud.audit.AuditLog",
        "methodName": "io.k8s.core.v1.configmaps.list",
        "resourceName": "core/v1/namespaces/kube-system/configmaps",
        "serviceName": "k8s.io",
        "status": {
          "code": "7",
          "message": "PERMISSION_DENIED"
        }

This log always appear on GKE log and don’t know this log is usual or unusual log that extracted from GKE system.

Any ideas how to fix this ?

Any help or hint will be very appreciated.

Thank You.