Unable to continue with install: could not get information about the resource ServiceAccount "nginx-ingress-controller-ingress-nginx" in namespace "extensions": serviceaccounts "nginx-ingress-controller-ingress-nginx" is forbidden: User "71b3b2a1-735c-44

Hi Venkat

Could you please let us know the steps you took

and Is your ingress controller running in a dedicated namespace and What permissions does the user or service account currently have.

Hello @Venkat,

This error indicates that you're trying to access Kubernetes resources by using a Microsoft Entra ID account that doesn’t have the required role-based access control (RBAC) permissions.

Depending on the RBAC type that's configured for the cluster (Kubernetes RBAC or Azure RBAC), different solutions might apply. Run the following command to determine which RBAC type the cluster is using:

Run the following command to determine which RBAC type your AKS cluster is using:

az aks show -g $RESOURCE_GROUP -n $CLUSTER_NAME --query aadProfile.enableAzureRbac

• If the result is null or empty, the cluster doesn't have Azure AD integration enabled. See Solving permission issues in local Kubernetes RBAC clusters.
• If the result is false, the cluster uses Kubernetes RBAC. See Solving permission issues in Kubernetes RBAC-based AKS clusters.
• If the result is true, the cluster uses Azure RBAC. See Solving permission issues in Azure RBAC-based AKS clusters.

Move further steps- https://learn.microsoft.com/en-us/troubleshoot/azure/azure-kubernetes/connectivity/user-cannot-get-cluster-resources?source=recommendations#solving-permissions-issues-in-local-kubernetes-rbac-clusters

If you have any further queries, do let us know.

Hello @Venkat,

Checking to see whether you have resolved the issue with the solution provided above, or if you need any further assistance, please let us know. We are happy to help.