Kubernetes:禁止使用configmaps:用户"kube"无法在命名空间"default"中列出配置映射

Question

我在Medium上按照本教程在AWS上部署Kubernetes集群:https://medium.com/containermind/how-to-create-a-kubernetes-cluster-on-aws-in-few-minutes-89dda10354f4

但是,当我启动Kubernetes仪表板时,我看到以下错误:

configmaps is forbidden: User "kube" cannot list configmaps in the namespace "default"
persistentvolumeclaims is forbidden: User "kube" cannot list persistentvolumeclaims in the namespace "default"
secrets is forbidden: User "kube" cannot list secrets in the namespace "default"
services is forbidden: User "kube" cannot list services in the namespace "default"
ingresses.extensions is forbidden: User "kube" cannot list ingresses.extensions in the namespace "default"

为什么会这样？

Answer 1

问题是本教程的第13步是:

kops得到秘密kube --type secret -oplaintext

它应该是:

kops获取秘密admin -oplaintext

Answer 2

User您登录的身份，，kube无权列出 K8s 跟踪的对象。您可以提升 的权限kube，或创建ServiceAccount具有正确权限的 来列出这些对象。