What should be the rights to RBAC for restricted read-only access?

[Fameing]

[dkapanidis]

A user with RoleBinding of the "view" ClusterRole should be able to have read-only access to a specific namespace.

In order for the user to be able to enumerate the namespaces (and switch between them) he should have watcher privileges on namespaces (with a ClusterRoleBinding) otherwise you'll need to configure the context with the default namespace so that Kubernetic picks it from there.

[skob]

list , get , watch permissions are needed for RO access to namespace