WebOct 7, 2024 · Your kubenetes-dashboard user doesn't have access to metrics.k8s.io.You need to write proper RBAC rule for that. I don't know kubernetes-dashboard too much, but look if they support RBAC and provide separate manifests that include rules. WebJan 6, 2024 · You probably need to bind the dashboard service account to the cluster admin role: kubectl create clusterrolebinding dashboard-admin-sa --clusterrole=cluster-admin --serviceaccount=default:dashboard-admin-sa Otherwise, the dashboard services account doesn't have access to the data that would populate the dashboard. Share …
Restricted user in K8s need CRD
WebAug 17, 2024 · kubectl create clusterrolebinding root-cluster-admin-binding --clusterrole=cluster-admin --user=admin 👍 11 xujihui1985, moshevayner, dthapa, bigknife, michaellihs, gopisaba, JustinPealing, clear-cloud, … WebApr 18, 2024 · Probably the best way to solve this would be to create a ClusterRole that provides GET and LIST rights to Namespace resources and then create a ClusterRoleBinding for each of the service accounts to that ClusterRole. Share Improve this answer Follow answered Jun 21, 2024 at 19:18 Rory McCune 133 5 Add a comment … crystal photonics berlin
Kubernetes RBAC rules for PersistentVolume - Stack Overflow
WebMar 8, 2024 · First, get the resource ID of your AKS cluster using the az aks show command. Then, assign the resource ID to a variable named AKS_ID so it can be referenced in other commands. Azure CLI Copy Open Cloudshell AKS_ID=$ (az aks show \ --resource-group myResourceGroup \ --name myAKSCluster \ --query id -o tsv) WebFeb 15, 2024 · apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: prometheus-k8s rules: - apiGroups: - "" resources: - nodes/metrics - nodes - services - endpoints - pods verbs: - get - list - watch - nonResourceURLs: - /metrics verbs: - get Share Follow answered Feb 22, 2024 at 12:52 Christopher Lanus 118 3 10 WebMar 15, 2024 · [""] in clusterrole manifest it should be just "" . because [""] will be array where apiGroups expects a string. under resources it should be namespaces not namespace because : kubectl api-resources grep 'namespace\ NAME' NAME SHORTNAMES APIVERSION NAMESPACED KIND namespaces ns v1 false … crystal photonics sanford