Kuberenetes 403：无法在命名空间中修补pod
在尝试部署使用go-micro框架的pod时，我收到以下错误：
2018/12/27 23:04:51 K8s: request failed with code 403
2018/12/27 23:04:51 K8s: request failed with body:
2018/12/27 23:04:51 {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"pods "user-5676b5696-jspp5" is forbidden: User "system:serviceaccount:default:default" cannot patch pods in the namespace "default"","reason":"Forbidden","details":{"name":"user-5676b5696-jspp5","kind":"pods"},"code":403}
2018/12/27 23:04:51 K8s: error
版权声明：本文内容由阿里云实名注册用户自发贡献，版权归原作者所有，阿里云开发者社区不拥有其著作权，亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容，填写侵权投诉表单进行举报，一经查实，本社区将立刻删除涉嫌侵权内容。
-
整合最优质的专家资源和技术资料，问答解疑
通过创建启用正确权限的群集角色绑定解决了该问题
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: micro-rbac
subjects:- kind: ServiceAccount
# Reference to upper'smetadata.name
name: default
# Reference to upper'smetadata.namespace
namespace: default
roleRef:
kind: ClusterRole
name: cluster-admin
apiGroup: rbac.authorization.k8s.io2019-07-17 23:24:07赞同 展开评论 - kind: ServiceAccount