"Forward port" is stuck pending when permissions are restricted using a ClusterRole

[artiommocrenco-amdaris]

Describe the bug

"Forward port" is stuck pending when permissions are restricted using a similar ClusterRole:

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: developers-extended
rules:
  - apiGroups:
      - "*"
    resources:
      - "*"
    verbs:
      - list
      - get
      - watch
  - apiGroups:
      - ""
    resources:
      - pods/portforward
    verbs:
      - get
      - list
      - create

To Reproduce

Steps to reproduce the bug:

1. Restrict a subject using ClusterRole from above (I was using service account and token)
2. Find a service, try to "Forward port"
3. The process is stuck, even after waiting several minutes

Expected results: port is forwarded or an error message is shown

Environment (please provide info about your environment):

• Installation type: winget
• Headlamp Version: 0.28.1
• Other: Windows 11

Are you able to fix this issue?

No

Additional Context

Works using kubectl port-forward svc/myservice 8080:80 and in aptakube using the same kubeconfig in both cases, but doesn't work with Headlamp.

Works as expected with Headlamp using cluster admin kubeconfig (using TLS client auth).

[artiommocrenco-amdaris]

#2936 could be related, as I was using a service account with a token

[anengineerdude]

Having issues as well the fixes in 0.28.1 related to port forward did not fix for me

[Davidr1963]

Having issues as well the fixes in 0.28.1 related to port forward did not work. It just get the Spinning wheel that it is trying.

[artiommocrenco-amdaris]

still not working for me in 0.29.0