pipeline流水线无法部署yaml-“system:serviceaccount:kube-ops:default“ cannot get resource “services“ in API g

直接上pipeline跑完的文字结果：

Error from server (Forbidden): error when retrieving current configuration of:
Resource: "apps/v1, Resource=deployments", GroupVersionKind: "apps/v1, Kind=Deployment"
Name: "deployment-app", Namespace: "default"
from server for: "deploy.yaml": deployments.apps "deployment-app" is forbidden: User "system:serviceaccount:kube-ops:default" cannot get resource "deployments" in API group "apps" in the namespace "default"
Error from server (Forbidden): error when retrieving current configuration of:
Resource: "/v1, Resource=services", GroupVersionKind: "/v1, Kind=Service"
Name: "testapp-svc", Namespace: "default"
from server for: "deploy.yaml": services "testapp-svc" is forbidden: User "system:serviceaccount:kube-ops:default" cannot get resource "services" in API group "" in the namespace "default"
[Pipeline] }
[Pipeline] // stage
[Pipeline] }
[Pipeline] // container
[Pipeline] }
[Pipeline] // node
[Pipeline] }
[Pipeline] // podTemplate
[Pipeline] End of Pipeline
ERROR: script returned exit code 1
Finished: FAILURE

这个原因是我们没有挂载/root/.kube/config文件，或者是挂载的宿主机不对，需要用到的master主节点的/root/.kube/config,复制到从节点就可以了，当然这样挂载config的权限太大，如果安全点还是自己创建一个需要用到的那几个权限即可