Mark
Mark

Reputation: 105

Why ClusterRole admin can't modify resource namespace

Clusterrole cluster-admin can modify resource namespace, while admin can't.

Why creating namespace needs higher permission?

Upvotes: 0

Views: 223

Answers (1)

Sai Chandra Gadde
Sai Chandra Gadde

Reputation: 3301

I think when specifying the subject's type to User instead of ServiceAccount that solves your issue

Try using this command:

kubectl create clusterrolebinding test-sa-binding --clusterrole=cluster-admin --user=test-sa

This will create a role to the user after that try to modify the namespaces accordingly.

Upvotes: 1

Related Questions