coredns未ready 状态running

coredns describe该pod无有用信息

logs日志如下

[INFO] plugin/ready: Still waiting on: "kubernetes"
[INFO] plugin/ready: Still waiting on: "kubernetes"
[INFO] plugin/ready: Still waiting on: "kubernetes"
[INFO] plugin/ready: Still waiting on: "kubernetes"
E1126 02:25:44.674787       1 reflector.go:138] pkg/mod/k8s.io/client-go@v0.20.2/tools/cache/reflector.go:167: Failed to watch *v1beta1.EndpointSlice: failed to list *v1beta1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:coredns" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope

翻译内容：*v1beta1.EndpointSlice:endpointslices.discovery.k8s.io被禁止：用户“系统：服务帐户：kube系统：coredns”无法列出API组中的资源“endpointslices”集群范围内的“discovery.k8s.io”

[信息]插件/准备就绪：仍在等待：“kubernetes”

Google查询报错

是coredns的一个bug, 需要修改coredns角色权限

kubectl edit clusterrole system:coredns

最后追加

- apiGroups:
  - discovery.k8s.io
  resources:
  - endpointslices
  verbs:
  - list
  - watch

修复后