【发布时间】：2021-12-12 04:03:13
【问题描述】：
我正在尝试创建一个 Istio Virtualservice。但是，尽管我绑定了集群管理员角色，但我收到了以下错误。
UPGRADE FAILED: could not get information about the resource: virtualservices.networking.istio.io "admin-ui" is forbidden: User "vaish@admin" cannot get resource "virtualservices" in API group "networking.istio.io" in the namespace "onboarding"
我还尝试如下创建一个新的Clusterrole 并创建一个与我的用户的绑定，这也不会产生任何结果。
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: istio-editor-role
labels:
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rules:
- apiGroups: ["config.istio.io", "networking.istio.io", "rbac.istio.io", "authentication.istio.io", "security.istio.io"]
resources: ["virtualservices"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"
kubectl create clusterrolebinding istio-editor-binding --clusterrole=istio-editor-role --user=vaish@admin
【问题讨论】：
-
能否将
kubectl describe clusterrole istio-editor-role的输出包含在内？ -
谢谢。我解决了。不知道为什么，但我将用户读取为集群管理员角色并且它有效
标签： kubernetes istio istio-gateway istio-operator