Kubernetes 无法在集群范围内创建命名空间

Question

我试图使用 kubectl 创建一个命名空间，但我收到了这个错误:

Error from server (Forbidden): error when creating "namespacefoo": namespaces is forbidden: User "xyz@pqr.com" cannot create namespaces at the cluster scope

Kubernetes 中有“范围”的概念吗？我找不到有关不同类型范围的任何信息。如果我无法在集群范围内创建命名空间，我可以在哪里创建命名空间？如何检查我可以访问哪些“范围”？

Answer 1

这取决于您的 Kubernetes 环境。
此 answer suggest (在 Google Cloud environment 中):

That suggests that gcloud config set container/use_client_certificate is set to true i.e. that gcloud is expecting a client cluster certificate to authenticate to the cluster (this is what the 'client' in the error message refers to).

Unsetting container/use_client_certificate by issuing the following command in the glcoud config ends the need for a legacy certificate or credentials and prevents the error message:

gcloud config unset container/use_client_certificate

Issues such as this may be more likely if you are using an older version of gcloud on your home workstation or elsewhere.

仍然， kubernetes/kubernetes issue 62361提到了相同的错误消息。