A developer’s kubeconfig user receives Forbidden when applying a Deployment in the permits namespace. What is the most likely authorization issue?
Select an answer to reveal the explanation.
Short Explanation
Forbidden on apply is the bouncer saying your badge lacks “create Deployments” for that floor. Fix the Role/RoleBinding verbs and resources. DNS and TLS ciphers are not RBAC.
Full Explanation
Kubernetes authorization (typically RBAC) must allow the user or impersonated identity the needed verbs on the resource in that namespace. A Forbidden result when creating Deployments usually means the Role/ClusterRole bound to the user lacks create (and related) on deployments. Affinity fields, CoreDNS stub domains, and Ingress TLS settings do not grant API authorization.