安装Prometheus监视Kubernetes集群时出错

Question

我正在安装prometheus来监视K8S，但遇到此错误。你能帮助我吗？非常感谢！！

helm version
Client: &version.Version{SemVer:"v2.13.0", 
GitCommit:"79d07943b03aea2b76c12644b4b54733bc5958d6", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.13.0", 
GitCommit:"79d07943b03aea2b76c12644b4b54733bc5958d6", GitTreeState:"clean"}

helm install stable/prometheus-operator --name prometheus-operator --namespace monitoring

Error: customresourcedefinitions.apiextensions.k8s.io "alertmanagers.monitoring.coreos.com" is forbidden: User "system:serviceaccount:kube-system:default" cannot delete resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope

Answer 1

当部署Tiller（Helm安装程序的服务器端）而没有具有适当群集角色的服务帐户（cluster-admin）时，这是一种典型情况。

您需要首先解决您的头盔的设置，能够与普罗米修斯运营商继续安装，如所描述这里，或通过运行一个命令之下直接之一：

1. kubectl create serviceaccount --namespace kube-system tiller
2. kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
3. kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'