# No Cluster Admin Rights

**URL:** <https://discuss.konghq.com/t/no-cluster-admin-rights/5499>\
**Category:** Questions\
**Created:** [February 10, 2020, 9:17am UTC](https://discuss.konghq.com/t/no-cluster-admin-rights/5499 "2020-02-10T09:17:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![peterpan21](https://avatars.discourse-cdn.com/v4/letter/p/e95f7d/32.png) [@peterpan21](https://discuss.konghq.com/u/peterpan21)\
**Post date:** [February 10, 2020, 9:17am UTC](https://discuss.konghq.com/t/no-cluster-admin-rights/5499/1 "2020-02-10T09:17:27Z")

</div>

Hello there,

is it possible to deploy Kong to K8s/OpenShift without having Cluster Admin rights?

I am trying to deploy allinone.yaml as Namespace admin and get the following error:

`customresourcedefinitions.apiextensions.k8s.io is forbidden: User "xyz" cannot create customresourcedefinitions.apiextensions.k8s.io at the cluster scope: no RBAC policy matched`

Thanks and greetings  
Johannes

---

<div class="post-metadata">

**Author:** ![hbagdi](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/hbagdi/32/562_2.png) [@hbagdi](https://discuss.konghq.com/u/hbagdi)\
**Post date:** [February 10, 2020, 4:32pm UTC](https://discuss.konghq.com/t/no-cluster-admin-rights/5499/2 "2020-02-10T16:32:11Z")

</div>

You will need to install CRDs at the minimum and in your case, that needs Cluster Admin rights.  
Other RBAC permissions for the controller can be tweaked to be limited to a single namespace but not this one.

---

<div class="post-metadata">

**Author:** ![peterpan21](https://avatars.discourse-cdn.com/v4/letter/p/e95f7d/32.png) [@peterpan21](https://discuss.konghq.com/u/peterpan21)\
**Post date:** [February 10, 2020, 4:42pm UTC](https://discuss.konghq.com/t/no-cluster-admin-rights/5499/3 "2020-02-10T16:42:53Z")

</div>

thanks for the fast reply. 🙂  
thread can be closed