RBAC reconciliation without namespaces list

[rpersee]

Hello,

I’m a non-admin user limited to a specific namespace. I can create/update/delete Roles and RoleBindings, but I cannot list namespaces. When syncing in Argo CD, I get this error:

Sync failed: error running rbacReconcile: error running kubectl auth reconcile: namespaces "..." is forbidden: User "system:serviceaccount:..:..." cannot get resource "namespaces" in API group "" in the namespace "...": access denied

It seems Argo CD tries to list namespaces before running kubectl auth reconcile:
resource_ops.go#L586

Is there a workaround for this?