<p>I want to set multiple accounts to only have access only to owned namespace, we try with authorization mode ABAC but we get when use kubectl "error: couldn't read version from server: the server does not allow access to the requested ressource" and it seems to be a bug. Is theire other way to do it ?</p>

<p>Before attempting to access your resources, kubectl first makes requests to the server's <code>/version</code> and <code>/api</code> endpoints to confirm compatibility and negotiate API version. In ABAC, the <code>/version</code> and <code>/api</code> endpoints are considered "nonResourcePaths", but those also require authorization. You can add a rule to your ABAC file allowing all users readonly access to nonResourcePaths as follows:</p>

<pre><code>{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user":"*", "nonResourcePath": "*", "readonly": true}}
</code></pre>

<p>From there, you can make it more restrictive if you need to.</p>
