Not able to read/write in the AKS Cluster even after assigning Azure Kubernetes Service RBAC Writer role to the cluster

11/3/2021

I have a user named rbacWriterAndConsoleNsReader in my azure portal and assigned him Azure Kubernetes Service Cluster User role and Azure Kubernetes Service RBAC Writer role (scope= full cluster)

But when I try to list namespaces or even pods, it shows the below error :

Error from server (Forbidden): namespaces is forbidden: User "rbacWriterAndConsoleNsReader@mayankprac2outlook.onmicrosoft.com" cannot list resource "namespaces" in API group "" at the cluster scope 

PS: NO YAML files should be used (as role here is in-built role provided by Azure), All must be done through Azure CLI

Where am I going wrong ? Can anyone pls explain ?

Thanks in advance !

-- Mayank
azure
azure-aks
azure-rbac
kubernetes

0 Answers