cannot create resource "inferenceservices" in API group "serving.kubeflow.org" in the namespace "..."

/kind bug

I don’t seem to be able to create inference services from within Jupyter. Doing so results in the following error:

inferenceservices.serving.kubeflow.org is forbidden: User "system:serviceaccount:karl-schriek:default-editor" cannot create resource "inferenceservices" in API group "serving.kubeflow.org" in the namespace "karl-schriek": RBAC: clusterrole.rbac.authorization.k8s.io

Authorisation does not appear to be present in the kubeflow-edit ClusterRole. As a workaround I currently have to create the following RoleBinding:

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: inferenceservice-edit
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/inference-service
rules:
- apiGroups:
  - "*"
  resources:
  - inferenceservice
  verbs:
  - "*"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: inferenceservice-edit
  namespace: karl-schriek
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: inferenceservice-edit
subjects:
- kind: ServiceAccount
  name: default-editor
  namespace: karl-schriek

Environment:

• Istio Version: 1.16
• Knative Version: 0.11.1
• KFServing Version: 0.3.0
• Kubeflow version: 1.0.0
• Kubernetes version: (use kubectl version): 1.14 (EKS)

[issue-label-bot[bot]]

Issue-Label Bot is automatically applying the labels:

Label	Probability
bug	0.95

Please mark this comment with 👍 or 👎 to give our bot feedback! Links: app homepage, dashboard and code for this bot.

[k8s-ci-robot]

@yuzisun: Closing this issue.

In response to this:

KFServing is added in aws kfdef /close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.