Wei Li I can't say for certain, but I don't believe that it is. The POST request is namespace-scoped so there are no 403s here. It is actually getting a 405 Method Not Allowed response code with message:

"create not allowed while CustomResourceDefinition is terminating".

It is possible that this is not an issue with MDC, but somewhere else.