Does sidecar work with RBAC enabled?

[JohnLindahlTech]

I am trying to use the instructions in a Google Kubernetes Engine (1.8.4-gke.1) without legacy auth. But the sidecar keeps crashing on me with the following error:

Error from server (Forbidden): pods "redis-0" is forbidden: User "system:serviceaccount:myNameSpace:default" cannot get pods in the namespace "myNameSpace": Unknown user "system:serviceaccount:myNameSpace:default"

Is there a known way of how to get this error resolved?

[JohnLindahlTech]

I got something working, but I am not 100% aware of the consequences:

kubectl create rolebinding myNameSpace-edit --clusterrole=edit --serviceaccount=myNameSpace:default --namespace=myNameSpace