As a DevOps Engineer, you can create a self-service namespace and run workloads within it. Once you create the namespace, you can share it with other DevOps Engineers or delete it when it is no longer required.


  • Verify that a vSphere administrator has created and activated a self-service namespace template on the cluster. See Create and Configure a Self-Service Namespace Template.
  • Verify that you are added to the permissions list in the self-service namespace template either individually or as a member of a group .
  • Get the IP address of the Supervisor Cluster control plane.


  1. Using the vSphere Plugin for kubectl, authenticate with the Supervisor Cluster. See Connect to the Supervisor Cluster as a vCenter Single Sign-On User.
    kubectl vsphere login --server=IP-ADDRESS --vsphere-username USERNAME
  2. Switch context to the Supervisor Cluster.
    kubectl config use-context SUPERVISOR-CLUSTER-IP
  3. Create a self-service namespace on the cluster.
    kubectl create namespace NAMESPACE NAME
    For example
    kubectl create namespace test-ns
    Note: Owner permissions are available to DevOps Engineers after you enable vSphere with Tanzu and upgrade the cluster. If you have only upgraded vCenter Server and not the cluster, the Devops Engineers will only have edit permissions on the namespaces.
    The namespace that you create appears in the cluster. To share the namespace with other DevOps engineers, contact the vSphere administrator.