easzlab
/
kubeasz
mirror of https://github.com/easzlab/kubeasz.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix kube-apiserver 访问 kubelet的权限

dev3
gjmzj 2022-11-26 11:18:02 +08:00
parent ebf4f1e507
commit 64d177aaea
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kube-master/tasks/main.yml
View File

@ -143,7 +143,7 @@
run_once: true run_once: true
- name: 创建user:kubernetes角色绑定 - name: 创建user:kubernetes角色绑定
command: "{{ base_dir }}/bin/kubectl create clusterrolebinding kubernetes-crb --clusterrole=cluster-admin --user=kubernetes" command: "{{ base_dir }}/bin/kubectl create clusterrolebinding kubernetes-crb --clusterrole=system:kubelet-api-admin --user=kubernetes"
run_once: true run_once: true
when: "'notfound' in crb_info.stdout" when: "'notfound' in crb_info.stdout"
connection: local connection: local