Update 13-kube-apiserver-to-kubelet.md
Hi, I'm getting this error. vagrant@master-1:~$ kubectl exec -ti busybox -- nslookup kubernetes error: unable to upgrade connection: Forbidden (user=kube-apiserver, verb=create, resource=nodes, subresource=proxy) vagrant@master-1:~$ It's due to this change in GitHub.. [Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md #118 I've just reverted this change and then it's OK. cat <<EOF | kubectl apply --kubeconfig admin.kubeconfig -f - apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: name: system:kube-apiserver namespace: "" roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: system:kube-apiserver-to-kubelet subjects: - apiGroup: rbac.authorization.k8s.io kind: User name: kube-apiserver # system:kube-apiserver EOFpull/634/head
parent
e695945532
commit
d62f7af933
|
@ -50,7 +50,7 @@ roleRef:
|
|||
subjects:
|
||||
- apiGroup: rbac.authorization.k8s.io
|
||||
kind: User
|
||||
name: system:kube-apiserver
|
||||
name: kube-apiserver
|
||||
EOF
|
||||
```
|
||||
Reference: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding
|
||||
|
|
Loading…
Reference in New Issue