Hi, Getting the following error when tried to run (Cluster Version: 2.3.5)

kubectl auth can-i create pods --as system:serviceaccount:default:spark                                           
Error from server (Forbidden): {"Code":{"Code":"Forbidden","Status":403},"Message":"<http://clusters.management.cattle.io|clusters.management.cattle.io> \"c-w4v2b\" is forbidden: User \"system:serviceaccount:default:spark\" cannot get resource \"clusters\" in API group \"<http://management.cattle.io|management.cattle.io>\" at the cluster scope","Cause":null,"FieldName":""} (post <http://selfsubjectaccessreviews.authorization.k8s.io|selfsubjectaccessreviews.authorization.k8s.io>)

You're probably hitting this bug: https://github.com/rancher/rancher/issues/41988