APIForbiddenError & APIServerError handling

[himani-dangwal]

Keywords

APIServerError APIForbiddenError

Problem

I am new to kopf . . when My pod is spun and kopf is triggered I need to wait around 20-30 sec and post that it logs below error .
moreover, the scope of kopf is only namespace based
Request attempt #1/9 failed; will retry: GET https://10.xxx.x.x:443/apis/custom.metrics.k8s.io/v1beta1 -> APIServerError(None, None)

Request attempt #7/9 failed; will retry: GET https://10.100.0.1:443/api/v1/namespaces -> APIForbiddenError('namespaces is forbidden: User "system:serviceaccount:xxx:xxx" cannot list resource "namespaces" in API group "" at the cluster scope', {'kind': 'Status', 'apiVersion': 'v1', 'metadata': {}, 'status': 'Failure', 'message': 'namespaces is forbidden: User "system:serviceaccount:xxx:xxx" cannot list resource "namespaces" in API group "" at the cluster scope', 'reason': 'Forbidden', 'details': {'kind': 'namespaces'}, 'code': 403})

is there any config setting that I am missing