Openshift :Forbidden!Configured service account doesn't have access. Service account may have been revoked

2/21/2019

i'm getting this error i also created rbac.yaml. But it require admin permission. is it possible to apply rbac.yaml without admin role ??

    apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: hazelcast-rbac
subjects:
  name: default-cluster
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: view
subjects:
- kind: ServiceAccount
  name: default
  namespace: default
--
kubernetes
openshift

1 Answer

2/21/2019

By default, only cluster admin can create ClusterRoleBinding. If you are project admin, please create RoleBinding instead.

To check if you can create rolebinding:

oc adm policy who-can create rolebinding
-- ccshih
Source: StackOverflow