No Cluster Admin Rights

Hello there,

is it possible to deploy Kong to K8s/OpenShift without having Cluster Admin rights?

I am trying to deploy allinone.yaml as Namespace admin and get the following error:

customresourcedefinitions.apiextensions.k8s.io is forbidden: User "xyz" cannot create customresourcedefinitions.apiextensions.k8s.io at the cluster scope: no RBAC policy matched

Thanks and greetings
Johannes

You will need to install CRDs at the minimum and in your case, that needs Cluster Admin rights.
Other RBAC permissions for the controller can be tweaked to be limited to a single namespace but not this one.

1 Like

thanks for the fast reply. :slight_smile:
thread can be closed