Skip to main content
Version: v4.12 Stable

Create Namespace Manually

Each namespace created in vCluster Platform belongs to a project. Projects control whether users can create namespaces with or without templates.

Who can create namespaces without a template​

By default, projects require templates for namespace creation. This means:

  • Project users can only create namespaces from allowed templates configured by the project admin.
  • Project admins and platform admins can always create namespaces without a template, regardless of project settings.

If project admins disable the requireTemplate setting, project users can also create namespaces without templates. Keep this setting enabled in production environments to maintain security controls.

Create without template​

Security consideration

Creating namespaces without a template bypasses the security controls that templates provide. Users with this capability can configure any namespace settings, including namespace objects and namespace apps, which deploy resources directly to the control plane cluster.

For production environments:

  • Keep templates required for all projects (the default requireTemplate setting).
  • Grant project admin roles only to users who need to create namespaces without templates.
  • Control who can create projects, since project creators become project admins. See project membership for details on project roles.
  1. Go to the Projects view using the menu on the left

  2. Click on Namespaces and the button

  3. In the popup make sure the namespace template field is empty and click the button

  4. Optional: Select a cluster where to create the namespace in. If no cluster is specified, the platform will automatically select one for you.

  5. Specify a name of the namespace at the top and optionally configure the namespace you want to create.

  6. Click on the button

  7. Retrieve a kube-context for this namespace using vCluster CLI:

    vcluster platform connect namespace [namespace-name] --project my-project

    See Connect for the kubeconfig without the CLI.