<p>I am trying to create an Istio <code>Virtualservice</code>. However, I am getting the below error, despite me having the cluster-admin role bound to.</p>
<pre><code>UPGRADE FAILED: could not get information about the resource: virtualservices.networking.istio.io &quot;admin-ui&quot; is forbidden: User &quot;vaish@admin&quot; cannot get resource &quot;virtualservices&quot; in API group &quot;networking.istio.io&quot; in the namespace &quot;onboarding&quot;
</code></pre>
<p>I also tried to create a new <code>Clusterrole</code> as below and create a binding to my user, which also does not yield any result.</p>
<pre><code>---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:  
  name: istio-editor-role
  labels:
    rbac.authorization.k8s.io/aggregate-to-edit: &quot;true&quot;
rules:
- apiGroups: [&quot;config.istio.io&quot;, &quot;networking.istio.io&quot;, &quot;rbac.istio.io&quot;, &quot;authentication.istio.io&quot;, &quot;security.istio.io&quot;]
  resources: [&quot;virtualservices&quot;]
  verbs: [&quot;get&quot;, &quot;list&quot;, &quot;watch&quot;, &quot;create&quot;, &quot;update&quot;, &quot;patch&quot;, &quot;delete&quot;
</code></pre>
<pre><code> kubectl create clusterrolebinding istio-editor-binding --clusterrole=istio-editor-role --user=vaish@admin
</code></pre>

<p>The solution was to add the user to the cluster-admin role</p>
