解决二进制K8S布署的metrics-server查看集群资源报错权限问题

最新推荐文章于 2023-04-27 17:45:15 发布

原创

最新推荐文章于 2023-04-27 17:45:15 发布 · 2.6k 阅读

8 ·

CC 4.0 BY-SA版权

文章标签：

#kubernetes

博客讲述了部署metrics-server后，使用kubectl top nodes及kubectl top pods报错，提示为RBAC权限问题，随后给kubernetes用户授权，最终解决问题。

布署完metircs-server后，查看已成功注册apiservices：

使用kubectl top nodes及kubectl top pods均报错：

Error from server (Forbidden): nodes.metrics.k8s.io is forbidden: User "kubernetes" cannot list resource "nodes" in API group "metrics.k8s.io" at the cluster scope

Error from server (Forbidden): pods.metrics.k8s.io is forbidden: User "kubernetes" cannot list resource "pods" in API group "metrics.k8s.io" in the namespace "default"

报错提示为RBAC权限问题，给kubernetes用户授权如下：

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: default
  name: metrics-reader
rules:
- apiGroups: ["metrics.k8s.io"]
  resources: ["pods"]
  verbs: ["get", "watch", "list"]
- apiGroups