<p>I am trying to execute below commands in a Kubeflow(v1.4.1) Jupyter Notebook.</p>
<pre><code>KServe = KServeClient()
KServe.create(isvc)
</code></pre>
<p>I am getting mentioned error while attempting to execute above mentioned command.</p>
<pre><code>ApiException: (403)
Reason: Forbidden
HTTP response headers: HTTPHeaderDict({'Audit-Id': '86bb1b59-20ae-4127-9732-d0355671b12f', 'Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'X-Content-Type-Options': 'nosniff', 'X-Kubernetes-Pf-Flowschema-Uid': 'a5a5d542-8a9a-4031-90d9-4faf01914391', 'X-Kubernetes-Pf-Prioritylevel-Uid': '6846984d-14c5-4f4d-9251-fe97d91b17fc', 'Date': 'Thu, 02 Jun 2022 07:53:30 GMT', 'Content-Length': '429'})
HTTP response body: {&quot;kind&quot;:&quot;Status&quot;,&quot;apiVersion&quot;:&quot;v1&quot;,&quot;metadata&quot;:{},&quot;status&quot;:&quot;Failure&quot;,&quot;message&quot;:&quot;inferenceservices.serving.kserve.io is forbidden: User \&quot;system:serviceaccount:kubeflow-user-example-com:default-editor\&quot; cannot create resource \&quot;inferenceservices\&quot; in API group \&quot;serving.kserve.io\&quot; in the namespace \&quot;kubeflow-user-example-com\&quot;&quot;,&quot;reason&quot;:&quot;Forbidden&quot;,&quot;details&quot;:{&quot;group&quot;:&quot;serving.kserve.io&quot;,&quot;kind&quot;:&quot;inferenceservices&quot;},&quot;code&quot;:403}
</code></pre>
<p>As a mitigation step I have added underlying manifests to my Kubernetes cluster via kubectl apply -f &lt;manifest-location.yaml&gt;</p>
<pre><code>apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: sla-manager-service-role
  namespace: default   //(have tried it with kubeflow-user-example-com as well)
  labels:
    app: sla-manager-app
rules:
- apiGroups: [&quot;serving.kserve.io&quot;] # &quot;&quot; indicates the core API group
  resources: [&quot;inferenceservices&quot;]
  verbs: [&quot;get&quot;, &quot;list&quot;, &quot;watch&quot;, &quot;create&quot;, &quot;update&quot;, &quot;patch&quot;, &quot;delete&quot;]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: role-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: sla-manager-service-role
subjects:
- kind: ServiceAccount
  name: default   //(have added it with default-editor as well)
  namespace: kubeflow-user-example-com
</code></pre>
<p>But this does not resolved the issue.</p>
<p>Output I am receiving for</p>
<pre><code>kubectl auth can-i create inferenceservice --as=system:serviceaccount:kubeflow-user-example-com:default-editor -n default

(Output) no
</code></pre>
<pre><code>kubectl auth can-i create inferenceservices

(Output) yes
</code></pre>
<p>Can you please help me with what I am missing here?</p>

HEM VATS
<p>Got to know that KServe is not comaptible with Kubeflow version 1.4 and works for Kubeflow version &gt;=1.5.</p>
<p>Switching to kfserving 0.6 resolved my issue.</p>
