AKS - Error from server (Forbidden): User cannot create resource "namespaces" in API group "" at the cluster scope

Question

I am trying to use the K8S through Azure AKS.

But when doing a simple command like: kubectl create namespace airflow

I get the following error message:

Error from server (Forbidden): namespaces is forbidden: User "xxx" cannot create resource "namespaces" in API group "" at the cluster scope

I have already commanded az aks get-credentials to connect to the cluster and then I try to create the namespace but without success.

Do you integrate it with Azure AD? Or what other features do you use? — Charles Xu, Mar 16 '20 at 07:54
I faced similar issue and found [this solution](https://stackoverflow.com/a/75468588/1176573) worked for me. — Rajesh Swarnkar, Feb 16 '23 at 06:34

score 10 · Accepted Answer · answered Mar 16 '20 at 15:31

10

In my case, this works when I use this command:

az aks get-credentials --resource-group <RESOURCE GROUP NAME> --name <AKS Cluster Name> --admin

answered Mar 16 '20 at 15:31

Felipe FB

2

Yeah, it must work. But it has the admin permissions. Do you mean to do that? – Charles Xu Mar 17 '20 at 02:00

score 4 · Answer 2 · answered Mar 13 '20 at 03:38

4

You dont have sufficient privileges to create namespace in the k8s cluster though you have access to the cluster

Check the below command to know if you have permission to create namespace

# kubectl auth can-i create namespace
yes

answered Mar 13 '20 at 03:38

P Ekambaram

score 0 · Answer 3 · edited Dec 23 '21 at 15:19

0

Make sure your /.kube/config has been configured with correct user name and credentials. Then run the following command to set the context:

Kubectl config set-context —user=xx yourclustername

edited Dec 23 '21 at 15:19

GeralexGR

answered Dec 21 '21 at 12:24

Eben

3 Answers3