<p>Failed to create clusterroles. &lt;> already assigned as the roles of "container engine admin" &amp; "container engine cluster admin"</p>

<pre><code>Error from server (Forbidden): error when creating "prometheus-
operator/prometheus-operator-cluster-role.yaml":
clusterroles.rbac.authorization.k8s.io "prometheus-operator"
is forbidden: attempt to grant extra privileges: [{[create]
[extensions] [thirdpartyresources] [] []} {[*]
[monitoring.coreos.com] [alertmanagers] [] []} {[*]
[monitoring.coreos.com] [prometheuses] [] []} {[*]
[monitoring.coreos.com] [servicemonitors] [] []} {[*]
[apps] [statefulsets] [] []} {[*] [] [configmaps] [] []}
{[*] [] [secrets] [] []} {[list] [] [pods] [] []} {[delete]
[] [pods] [] []} {[get] [] [services] [] []} {[create]
[] [services] [] []} {[update] [] [services] [] []} {[get]
[] [endpoints] [] []} {[create] [] [endpoints] [] []}
{[update] [] [endpoints] [] []} {[list] [] [nodes]
[] []} {[watch] [] [nodes] [] []}]
user=&amp;{&lt;&lt;my_account&gt;&gt;@gmail.com
[system:authenticated] map[]} ownerrules=[{[create]
[authorization.k8s.io] [selfsubjectaccessreviews]
[] []} {[get] [] [] [] [/api /api/* /apis /apis/*
/healthz /swaggerapi /swaggerapi/* /version]}]
ruleResolutionErrors=[]
</code></pre>

ccyang2005
<p>I've got the same problem on Google Kubernetes Engine.</p>

<p>According to the answer of <em>enj</em> and the comment of <em>ccyang2005</em> please find the following snipet who solve my problem :)</p>

<h1>Step 1 : Get your identity</h1>

<pre><code>gcloud info | grep Account
</code></pre>

<p>Will output you something like <code>Account: [myname@example.org]</code></p>

<h1>Step 2 : grant cluster-admin to your current identity</h1>

<pre><code>kubectl create clusterrolebinding myname-cluster-admin-binding \
  --clusterrole=cluster-admin \
  --user=myname@example.org
</code></pre>

<p>Will output somthing like <code>Clusterrolebinding "myname-cluster-admin-binding" created</code></p>

<hr>

<p>After that, you'll be able to create CusterRoles</p>
