安装Prometheus监视Kubernetes集群时出错 [英] Error when install prometheus to monitor Kubernetes Cluster

问题描述

我正在安装Prometheus来监视K8S，但遇到此错误. 你能帮助我吗? 非常感谢！！

I am installing prometheus to monitor K8S but I met this error. Can you help me? Thank you so much!!

helm version
Client: &version.Version{SemVer:"v2.13.0", 
GitCommit:"79d07943b03aea2b76c12644b4b54733bc5958d6", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.13.0", 
GitCommit:"79d07943b03aea2b76c12644b4b54733bc5958d6", GitTreeState:"clean"}

helm install stable/prometheus-operator --name prometheus-operator --namespace monitoring

Error: customresourcedefinitions.apiextensions.k8s.io "alertmanagers.monitoring.coreos.com" is forbidden: User "system:serviceaccount:kube-system:default" cannot delete resource "customresourcedefinitions" in API group "apiextensions.k8s.io" at the cluster scope

推荐答案

在没有服务帐户具有适当群集角色(cluster-admin)的情况下部署Tiller(Helm安装程序的服务器端)时，这是一种典型情况.

This is a typical situation when Tiller (server side of Helm setup) is deployed without a service account having appropriate cluster role (cluster-admin).

您需要先修复Helm设置，然后才能进行prometheus-operator的安装，如

You need to fix your Helm setup first, to be able to proceed with prometheus-operator installation, as described here, or by running the below commands directly one by one:

1. kubectl create serviceaccount --namespace kube-system tiller
2. kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
3. kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'

1. kubectl create serviceaccount --namespace kube-system tiller
2. kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
3. kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'

这篇关于安装Prometheus监视Kubernetes集群时出错的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！