Block namespace creation for users inside project

Rancher 2.x
1

For security reasons we don’t want our users to be able to create namespaces inside their project.
Unfortunatly we can’t find a way to block this feature…

Namespace creation is a clusterRole called create-ns bound to users by clusterRoleBindings of the same name. Deleting thoses ressources makes no difference as Rancher auto-recreates them immediately.

Any help would be greatly appreciated
Thx in advance

2

Found the solution. Not thanks to Rancher’s documentation…

To prevent users from adding namespaces themselves you can edit a particular CRD ressource from Rancher.

kubectl edit roletemplates.management.cattle.io project-member

Inside remove all references to namespaces.

In the UI the “create namespace” button will disappear.