Add check for incomplete SelfSubjectRulesReview to fix GKE

Signed-off-by: Sebastian Malton <sebastian@malton.name>

src/common/cluster/authorization-namespace-review.injectable.ts

@@ -42,7 +42,13 @@ const authorizationNamespaceReview = ({ logger }: Dependencies): AuthorizationNa
 
         const resources = new Set<string>();
 
-        body.status?.resourceRules.forEach(resourceRule => {
+        if (!body.status || body.status.incomplete) {
+          logger.warn(`[AUTHORIZATION-NAMESPACE-REVIEW]: allowing all resources in namespace="${namespace}" due to incomplete SelfSubjectRulesReview: ${body.status?.evaluationError}`);
+
+          return availableResources.map(r => r.apiName);
+        }
+
+        body.status.resourceRules.forEach(resourceRule => {
           if (!resourceRule.verbs.some(verb => ["*", "list"].includes(verb)) || !resourceRule.resources) {
             return;
           }
@@ -62,7 +68,6 @@ const authorizationNamespaceReview = ({ logger }: Dependencies): AuthorizationNa
           } else {
             resourceRule.resources.forEach(resource => resources.add(resource));
           }
-          
         });
 
         return [...resources];