我正在安装prometheus来监视K8S,但遇到此错误。
你能帮助我吗?
非常感谢!!
helm version
Client: &version.Version{SemVer:"v2.13.0",
GitCommit:"79d07943b03aea2b76c12644b4b54733bc5958d6", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.13.0",
GitCommit:"79d07943b03aea2b76c12644b4b54733bc5958d6", GitTreeState:"clean"}
helm install stable/prometheus-operator --name prometheus-operator --namespace monitoring
Error: customresourcedefinitions.apiextensions.k8s.io "alertmanagers.monitoring.coreos.com" is forbidden: User "system:serviceaccount:kube-system:default" cannot delete resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope
最佳答案
当部署Tiller(Helm安装程序的服务器端)而没有具有适当群集角色的服务帐户(cluster-admin)时,这是一种典型情况。
您需要先修复Helm设置,然后才能按照here所述进行prometheus-operator的安装,或者直接一个接一个地运行以下命令:
kubectl create serviceaccount --namespace kube-system tiller
kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'