kubernetes - 允许查看仪表板的集群角色
问题描述
我正在尝试访问仪表板,但出现以下错误
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {
},
"status": "Failure",
"message": "services \"kubernetes-dashboard\" is forbidden: User \"operation\" cannot get services/proxy in the namespace \"kube-system\"",
"reason": "Forbidden",
"details": {
"name": "kubernetes-dashboard",
"kind": "services"
},
"code": 403
}
我的集群角色如下所示。
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
namespace: '*'
name: pod-reader
rules:
- apiGroups: ["", "extensions", "apps"]
resources: ["pods"]
verbs: ["get", "list", "watch"]
我的集群角色绑定如下所示。
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: read-pods
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: pod-reader
subjects:
- kind: User
name: operation
namespace: kube-system
我很清楚这是相当基本的。但我试图添加各种东西都无济于事。关于它的外观有什么建议吗?
解决方案
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: pod-reader
rules:
- apiGroups: [""]
resources:
- services/proxy
verbs: ["get", "list", "watch"]
推荐阅读
- python - MongoDB 查询中的 $lte 未按预期工作
- google-apps-script - 如何在其他工作表的应用程序脚本中请求或获得谷歌电子表格访问权限?
- javascript - Jest、Babel 和 Storybook,export 与 module.exports
- c# - 抓取 Active Directory 时出现内存异常
- facebook - 通过 API 在 Facebook 上分享帖子后的 Facebook 分享响应
- php - Call for undefined function in Wordpress plugin
- android - 在选项卡布局片段中未在 androidX 中显示其布局
- apache-spark - java.lang.UnsatisfiedLinkError: jep.Jep.init(Ljava/lang/ClassLoader;ZZ) on google cloud dataproc
- javascript - How to create singleton classes in Javascript?
- file - 从 Google Cloud Compute 上的 Windows Server 映射 Windows 上的共享文件夹