juju ssh does not work for non admin user for a k8s model

[Yang Kelvin Liu]

juju ssh of a k8s model requires to use of the model's cloud credential.
The credential is owned by the model admin user.
If a non-admin user tries to run juju ssh, an not found error will be raised because the user won't have access to the model's cloud credential.

ERROR getting credential: cloud credential "k8s-is-stg/stg-events/stg-events" not found

[Yang Kelvin Liu (kelvin.liu)]

https://github.com/juju/juju/pull/14615

[John A Meinel (jameinel)]

So PR 14615 mentions creating a new service account for a model that Juju will use for SSH. What happens for existing models that were created before this PR? do we try to use the model account, and then fail (and/or fallback to the original superuser only account)?

[Yang Kelvin Liu (kelvin.liu)]

These RBAC resources are created by the model operator, so they will be created once the model is upgraded to 2.9.35.