Update 13-kube-apiserver-to-kubelet.md

Hi,
I'm getting this error.

vagrant@master-1:~$ kubectl exec -ti busybox -- nslookup kubernetes

error: unable to upgrade connection: Forbidden (user=kube-apiserver, verb=create, resource=nodes, subresource=proxy)

vagrant@master-1:~$

It's due to this change in GitHub..
[Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md #118


I've just reverted this change and then it's OK.

cat <<EOF | kubectl apply --kubeconfig admin.kubeconfig -f -
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: system:kube-apiserver
  namespace: ""
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:kube-apiserver-to-kubelet
subjects:
  - apiGroup: rbac.authorization.k8s.io
    kind: User
    name: kube-apiserver  # system:kube-apiserver 
EOF
pull/634/head
teerasits 2021-05-13 00:02:52 +08:00 committed by GitHub
parent e695945532
commit d62f7af933
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -50,7 +50,7 @@ roleRef:
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: User
name: system:kube-apiserver
name: kube-apiserver
EOF
```
Reference: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding