"Error from server (Forbidden), can only create tokens for individual service accounts" Is Displayed When kubectl Commands Are Executed

Symptom

The following error information is displayed when kubectl commands are executed:

Error from server (Forbidden): error when deleting "device-plugin-310P-volcano-v6.0.RC2.yaml": serviceaccounts "ascend-device-plugin-sa-310p" is forbidden: User "system:node:worker-2" cannot delete resource "serviceaccounts" in API group "" in the namespace "kube-system": can only create tokens for individual service accounts

Cause Analysis

The commands are not executed on the management node. As a result, the commands fail to be executed.

Solution

Run the commands on the management node. The following is an example.