Error: namespaces "default" is forbidden: User "system:serviceaccount:kube-system:default" cannot get resource "namespaces" in API group "" in the namespace "default"

 [root@unica12master Helm-updated-v12.1-db2]# ./start

-bash: ./start: No such file or directory

[root@unica12master Helm-updated-v12.1-db2]# ./startunicamaster.sh

start pv

persistentvolume/pv2 unchanged

start matrix server

start ng

Error: release nginx failed: namespaces "default" is forbidden: User "system:serviceaccount:kube-system:default" cannot get resource "namespaces" in API group "" in the namespace "default"

start unica

Error: release hcl failed: namespaces "default" is forbidden: User "system:serviceaccount:kube-system:default" cannot get resource "namespaces" in API group "" in the namespace "default"

Solution:

[root@unica12master Helm-updated-v12.1-db2]# kubectl create serviceaccount --namespace kube-system tiller

serviceaccount/tiller created

[root@unica12master Helm-updated-v12.1-db2]# kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller

clusterrolebinding.rbac.authorization.k8s.io/tiller-cluster-rule created

[root@unica12master Helm-updated-v12.1-db2]# kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'

deployment.apps/tiller-deploy patched