Failed to list *v1.Secret: secrets is forbidden: User "system:node

Jun 14 11:40:13 kubelet[22623]: E0614 11:40:13.372894   22623 reflector.go:126] object-""/"": Failed to list *v1.Secret: secrets is forbidden: User "system:node:nodeA" cannot list resource "secrets" in API group "" in the namespace "": No Object name found

 

原因:system:node没权限

解决方法:给他加到system:nodes组里

示例:

kubectl create clusterrolebinding system-node-role-bound --clusterrole=system:node --group=system:nodes