起因:
kubeadm手动部署dashboard问题,记录一下
网页端错误如下:
forbidden: User "system:anonymous" cannot get resource "pods" in API group "" in the namespace "default"
需要新增用户和权限
创建:
vi admin-user.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kubernetes-dashboard
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin-user
namespace: kubernetes-dashboard
执行启动:
kubectl apply -f admin-user.yaml
查看dashboard的token
kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk ‘{print $1}’)
问题解决,正常访问。
PS:
##查看日志
kubectl logs -f -n namespace pod名字
kubectl logs -f -n kubernetes-dashboard kubernetes-dashboard-5d4dc8b976-sdxx