d62f7af933
Update 13-kube-apiserver-to-kubelet.md
...
Hi,
I'm getting this error.
vagrant@master-1:~$ kubectl exec -ti busybox -- nslookup kubernetes
error: unable to upgrade connection: Forbidden (user=kube-apiserver, verb=create, resource=nodes, subresource=proxy)
vagrant@master-1:~$
It's due to this change in GitHub..
[Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md #118
I've just reverted this change and then it's OK.
cat <<EOF | kubectl apply --kubeconfig admin.kubeconfig -f -
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: system:kube-apiserver
namespace: ""
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:kube-apiserver-to-kubelet
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: User
name: kube-apiserver # system:kube-apiserver
EOF
2021-05-13 00:02:52 +08:00
6538fc895c
Merge pull request #118 from ChaturvediSulabh/patch-1
...
[Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md
2021-04-18 23:43:27 +02:00
300a5f20ff
Update 13-kube-apiserver-to-kubelet.md
...
Reference link updated to https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding
2020-07-20 06:04:42 +02:00
38918b3d5a
Update 13-kube-apiserver-to-kubelet.md
...
I kept getting error as the user is `system:kube-apiserver` and not 'kube-apiserver'. Also, the description says user as kubernetes which should also be rather `system:kube-apiserver`
below is the error I received and corrected the CRB manifest after looking carefully at the User attribute in the error received.
```
~ at ☸️ kubernetes-the-hard-way
➜ kubectl logs weave-net-7bmxs weave -n kube-system
Error from server (Forbidden): Forbidden (user=system:kube-apiserver, verb=get, resource=nodes, subresource=proxy) ( pods/log weave-net-7bmxs)
```
2020-04-17 12:33:19 +01:00
4af6d2bbf3
Update 13-kube-apiserver-to-kubelet.md
...
Adding refernce for cluster role and cluster bindings from kubernetes.io
2019-11-19 10:13:57 +05:30
7ed632a08c
Fix links
...
Update Smoke Tests
2019-03-20 18:12:49 +08:00
teerasits