kubernetes dashboard 授权/权限/角色绑定问题导致页面报错

rockstics

已于 2022-11-07 17:34:27 修改

阅读量7.4k

点赞数

文章标签： kubernetes docker 容器

于 2022-02-16 16:29:51 首次发布

本文链接：https://blog.csdn.net/rockstics/article/details/122966334

版权

报错：
namespaces is forbidden: User “system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard” cannot list resource “namespaces” in API group “” at the cluster scope
system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard

events is forbidden: User “system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard” cannot list resource “events” in API group “” in the namespace “default”

pods is forbidden: User “system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard” cannot list resource “pods” in API group “” in the namespace “default”
如图：
在这里插入图片描述

原因：
serviceaccount kubernetes-dashboard 权限问题,源文件namespace与当前环境namespace不一致

解决：

kubectl create clusterrolebinding kubernetes-dashboard --clusterrole=cluster-admin --serviceaccount=kubernetes-dashboard:kubernetes-dashboard

也可采用yaml方式
[root@k8s-master1 ~]# cat ansible-install-k8s/roles/addons/files/dashboard-clusterrole.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubernetes-dashboard
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: kubernetes-dashboard
  namespace: kubernetes-dashboard