coredns pod not ready

Question

coredns-545d6fc579-8sb95 0/1 Running 0 43m
coredns-545d6fc579-xdqxg 0/1 Running 0 43m

查看日志： kubectl logs -f coredns-545d6fc579-8sb95 -n kube-system

E0805 16:15:41.454067 1 reflector.go:138] pkg/mod/k8s.io/client-go@v0.21.1/tools/cache/reflector.go:167: Failed to watch *v1.EndpointSlice: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User “system:serviceaccount:kube-system:coredns” cannot list resource “endpointslices” in API group “discovery.k8s.io” at the cluster scope

Answer 1

清风 2021-08-06 07:37:28

重新安装一下coredns

• qq_CMD_1 #1

  怎么重新安装啊

• 清风 回复 qq_CMD_1 #2

  这错误是coredns没有权限访问k8s资源，修改权限：
  kubectl edit clusterrole system:coredns
  
  最后追加
  
  - apiGroups:
    - discovery.k8s.io
    resources:
    - endpointslices
    verbs:
    - list
    - watch