Access to read cluster_networking_config / cluster_audit_config denied (7.0 <- 6.2)

[r0mant]

Description

What happened:

When 6.2 leaf cluster is connected to 7.0 root cluster the following messages appear in the logs.

Leaf:

2021-07-26T14:50:59+03:00 INFO [RBAC]      Access to read cluster_networking_config in namespace default denied to roles RemoteProxy,default-implicit-role: no allow rule matched. services/role.go:2114
2021-07-26T14:51:09+03:00 INFO [RBAC]      Access to read cluster_audit_config in namespace default denied to roles RemoteProxy,default-implicit-role: no allow rule matched. services/role.go:2114

Root:

2021-07-26T14:54:39+03:00 [REVERSE:L] WARN Re-init the cache on error. error:[
ERROR REPORT:
Original Error: *trace.ConnectionProblemError watcher is closed
Stack Trace:
	/Users/r0mant/code/go/src/github.com/gravitational/teleport/lib/cache/cache.go:857 github.com/gravitational/teleport/lib/cache.(*Cache).fetchAndWatch
	/Users/r0mant/code/go/src/github.com/gravitational/teleport/lib/cache/cache.go:715 github.com/gravitational/teleport/lib/cache.(*Cache).update
	/usr/local/Cellar/go/1.16.3/libexec/src/runtime/asm_amd64.s:1371 runtime.goexit
User Message: watcher is closed] cache/cache.go:721
2021-07-26T14:54:39+03:00 [REVERSE:L] DEBU Reloading Linear(attempt=43, duration=10s). cache/cache.go:727

Things like tsh ls and tsh ssh appear to work but not sure what other functionality may be affected.

What you expected to happen:

No errors/warnings in the logs.

Reproduction Steps

As minimally and precisely as possible, describe step-by-step how to reproduce the problem.

1. Connect 6.2 leaf to 7.0 root.
2. Look in the logs.

Server Details

• Teleport version (run teleport version): 7.0.0-beta.3 root and 6.2.8 leaf

Client Details

• Tsh version (tsh version): 7.0.0-beta.3

[r0mant]

@andrejtokarcik FYI ^