代码之家  ›  专栏  ›  技术社区  ›  vorburger

允许用户向前使用oc/kubectl端口的角色的名称是什么?

  •  3
  • vorburger  · 技术社区  · 8 年前

    我想创建一个允许的服务帐户 oc port-forward kubectl port-forward 但我一辈子都搞不清我在许多角色中的哪一个 oc get clusterrole 会允许吗?( oc get role 是空的。)

    error: error upgrading connection: pods "minecraft-storeys-maker-40-ps85h" is forbidden: User "system:serviceaccount:learn-study:oc-port-forward-container" cannot create pods/portforward in the namespace "learn-study": User "system:serviceaccount:learn-study:oc-port-forward-container" cannot create pods/portforward in project "learn-study"
    

    oc policy add-role-to-user pods/portforward -z oc-port-forward-container
    Error from server (BadRequest): Name parameter invalid: "pods/portforward": may not contain '/'
    

    另外,“左舷向前”也不好:

    oc policy add-role-to-user portforward -z oc-port-forward-container 
    Error from server (NotFound): rolebindings.authorization.openshift.io "portforward" not found
    

    是为了 https://github.com/OASIS-learn-study/oc-port-forward-container .

    1 回复  |  直到 8 年前
        1
  •  0
  •   switchboard.op    7 年前

    在OpenShift中 edit admin 群集角色应具有 create pods/portforward .