Files
kubernetes-the-hard-way/docs
teerasits d62f7af933 Update 13-kube-apiserver-to-kubelet.md
Hi,
I'm getting this error.

vagrant@master-1:~$ kubectl exec -ti busybox -- nslookup kubernetes

error: unable to upgrade connection: Forbidden (user=kube-apiserver, verb=create, resource=nodes, subresource=proxy)

vagrant@master-1:~$

It's due to this change in GitHub..
[Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md #118


I've just reverted this change and then it's OK.

cat <<EOF | kubectl apply --kubeconfig admin.kubeconfig -f -
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: system:kube-apiserver
  namespace: ""
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:kube-apiserver-to-kubelet
subjects:
  - apiGroup: rbac.authorization.k8s.io
    kind: User
    name: kube-apiserver  # system:kube-apiserver 
EOF
2021-05-13 00:02:52 +08:00
..
2019-11-18 15:45:04 -08:00
2020-06-19 09:47:09 +09:00
2019-11-19 10:19:29 +05:30
2019-04-29 15:48:31 -07:00