Need help setting up NGINX

General Discussions
1

Hello everyone, My setup is 3 masters, 3 workers, and one node for the LB. Im trying to add a LB (nginx) in my cluster, however Im getting this error message when i run the command below. Has anyone else encountered the same error message?

kubectl create namespace ingress-nginx

Error from server (Forbidden): namespaces is forbidden: User “system:node:k8s-worker” cannot create resource “namespaces” in API group “” at the cluster scope

kubectl version

WARNING: This version information is deprecated and will be replaced with the output from kubectl version --short. Use --output=yaml|json to get the full version.
Client Version: version.Info{Major:“1”, Minor:“27”, GitVersion:“v1.27.3”, GitCommit:“25b4e43193bcda6c7328a6d147b1fb73a33f1598”, GitTreeState:“clean”, BuildDate:“2023-06-14T09:53:42Z”, GoVersion:“go1.20.5”, Compiler:“gc”, Platform:“linux/amd64”}
Kustomize Version: v5.0.1
Baremetal
Linux 22.04 LTS

2

You are using a user (k8s-worker) that doesn’t have the permission to create namespaces.

Try to do it as admin or to create a RoleBinding or ClusterRoleBinding resource :

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: ns-creator
rules:
- apiGroups: [""] # "" indicates the core API group
  resources: ["namespaces"]
  verbs: ["create", "get", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: create-ns
subjects:
- kind: User
  name: "system:node:k8s-worker"
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: ClusterRole
  name: ns-creator
  apiGroup: rbac.authorization.k8s.io