• 카테고리

    질문 & 답변
  • 세부 분야

    데브옵스 · 인프라

  • 해결 여부

    미해결

데쉬보드에서 'Cluster-admin' not foud 로 12개 에러가 납니다.

21.02.03 01:39 작성 조회수 254

1

설치 영상 보고 따라 했는데..

데쉬보드 페이지는 열리는데 노드와 네임스페이스 정보를 못읽어오네요.

configmaps is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "configmaps" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-118" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>persistentvolumeclaims is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "persistentvolumeclaims" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-119" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>secrets is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "secrets" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-122" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>services is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "services" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-123" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>ingresses.extensions is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "ingresses" in API group "extensions" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-124" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>daemonsets.apps is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "daemonsets" in API group "apps" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-125" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>pods is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "pods" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-126" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>events is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "events" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-127" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>deployments.apps is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "deployments" in API group "apps" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-128" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>replicasets.apps is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "replicasets" in API group "apps" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-129" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>jobs.batch is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "jobs" in API group "batch" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-130" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>cronjobs.batch is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "cronjobs" in API group "batch" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-131" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>replicationcontrollers is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "replicationcontrollers" in API group "" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found<md-icon ng-click="$ctrl.dismissWarning($index)" class="material-icons kd-dismiss-icon" aria-label="무시" md-labeled-by-tooltip="md-tooltip-132" role="button" tabindex="0" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto 16px auto auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga';cursor:pointer;outline:0px;text-align:right">close</md-icon>
<md-icon class="material-icons" role="img" aria-label="warning" style="color:rgba(0, 0, 0, 0.54);display:inline-block;vertical-align:middle;margin:auto;background-repeat:no-repeat;fill:currentcolor;height:24px;width:24px;min-height:24px;min-width:24px;-webkit-font-smoothing:antialiased;white-space:nowrap;font-family:'Material Icons';font-size:24px;line-height:1;letter-spacing:normal;overflow-wrap:normal;direction:ltr;text-rendering:optimizelegibility;font-feature-settings:'liga'">warning</md-icon>statefulsets.apps is forbidden: User "system:serviceaccount:kube-system:kubernetes-dashboard" cannot list resource "statefulsets" in API group "apps" in the namespace "default": RBAC: clusterrole.rbac.authorization.k8s.io "Cluster-admin" not found

 

아래 설정 부분이 잘못된 건가요?

[root@localhost /]# cat << EOF | kubectl create -f -<o:p></o:p>

> apiVersion: rbac.authorization.k8s.io/v1beta1<o:p></o:p>

> kind: ClusterRoleBinding<o:p></o:p>

> metadata:<o:p></o:p>

>  name: kubernetes-dashboard<o:p></o:p>

>  labels:<o:p></o:p>

>    k8s-app: kubernetes-dashboard<o:p></o:p>

> roleRef:<o:p></o:p>

>   apiGroup: rbac.authorization.k8s.io<o:p></o:p>

>   kind: ClusterRole<o:p></o:p>

>   name: Cluster-admin<o:p></o:p>

> subjects:<o:p></o:p>

> - kind: ServiceAccount<o:p></o:p>

>   name: kubernetes-dashboard<o:p></o:p>

>   namespace: kube-system<o:p></o:p>

> EOF<o:p></o:p>

clusterrolebinding.rbac.authorization.k8s.io/kubernetes-dashboard created<o:p></o:p>

확인 부탁드립니다. ^^

답변 1

답변을 작성해보세요.

0

안녕하세요!

제가 작성해놓은 아래 설치가이드를 보시면

https://kubetm.github.io/practice/appendix/installation_case2/

6-2-1) Dashboard 설치

해당 설정은 교육목적으로 권한 설정을 모두 해제하는 방법이기 때문에 프로젝트에서 사용하실때는 이점 유의바래요
>https://github.com/kubernetes/dashboard

kubectl apply -f https://kubetm.github.io/documents/appendix/kubetm-dashboard-v1.10.1.yaml

이렇게 Dashboard를 설치하게 되어 있습니다.

동영상은 예전버전이고 자료실에 내용이 계속 업데이트가 되기 때문에, 강의자료를 참고하시는게 좋고요.

위 내용을 봤을때 문제점은 name : Cluster-admin 에서 C가 대문자인게 문제로 보입니다.

감사합니다~!