k8s搭建dashboard权限问题：forbidden “default“

起因：

kubeadm手动部署dashboard问题，记录一下

网页端错误如下：

forbidden: User "system:anonymous" cannot get resource "pods" in API group "" in the namespace "default"

需要新增用户和权限

创建：

vi admin-user.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kubernetes-dashboard

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kubernetes-dashboard

执行启动：

kubectl  apply  -f admin-user.yaml

查看dashboard的token

kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk ‘{print $1}’)

问题解决，正常访问。

PS：
##查看日志
kubectl logs -f -n namespace pod名字
kubectl logs -f -n kubernetes-dashboard kubernetes-dashboard-5d4dc8b976-sdxx