Error from server (Forbidden): Forbidden (user=system:anonymous, verb=get, resource=nodes, subresour

Error from server (Forbidden): Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy)

K8s Master1节点上查看日志，报错Error

[root@master1 ~]# kubectl logs nginx-deployment-5477945587-jwlgz
Error from server (Forbidden): Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy) ( pods/log nginx-deployment-5477945587-jwlgz)

根据报错提示信息可知：用户system:anonymous访问日志被禁止

• 所以我们使用cluster-admin角色给用户system:anonymous做clusterrolebinding.

[root@master1 ~]# kubectl create clusterrolebinding cluster-system-anonymous --clusterrole=cluster-admin --user=system:anonymous

clusterrolebinding.rbac.authorization.k8s.io/cluster-system-anonymous created

• 重新查看pod日志信息，成功

[root@master1 ~]# kubectl logs --tail=30 nginx-deployment-5477945587-jwlgz
/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration
/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/
/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh
10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf
10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf
/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh
/docker-entrypoint.sh: Configuration complete; ready for start up