# Namespaces "kube-system" is forbidden

**URL:** <https://discuss.kubernetes.io/t/namespaces-kube-system-is-forbidden/23636>\
**Category:** General Discussions\
**Created:** [March 29, 2023, 10:56am UTC](https://discuss.kubernetes.io/t/namespaces-kube-system-is-forbidden/23636 "2023-03-29T10:56:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![CuongGiap](https://avatars.discourse-cdn.com/v4/letter/c/e8c25b/32.png) [@CuongGiap](https://discuss.kubernetes.io/u/CuongGiap)\
**Post date:** [March 29, 2023, 10:56am UTC](https://discuss.kubernetes.io/t/namespaces-kube-system-is-forbidden/23636/1 "2023-03-29T10:56:04Z")

</div>

Hi  
I’m having a problem when I install ebs-csi-driver for AWS EKS  
I used the account with administratoraccess to install via was console but had an error “namespaces “kube-system” is forbidden: User “eks:addon-manager” cannot patch resource “namespaces” in API group “” in the namespace “kube-system””  
I don’t know why the administrator permission can not install add-on.  
I also tried to create IAM role but follow [Link](https://docs.aws.amazon.com/eks/latest/userguide/csi-iam-role.html) but receive error : Error from server (NotFound): serviceaccounts “ebs-csi-controller-sa” not found

I just started with Kubernetes so don’t know how t resolve,  
Anyone can help ?