通过微服务获取 Kube.netes pods 信息

Question

When sending request to api, it throws NPE at api.listPodForAllNamespaces step. Could you please advise, what should be the correct configuration here?

Answer 1

As the error says:

pods is forbidden: User \"system:serviceaccount:sds-test:default\" cannot list resource \"pods\"

This means that the service account default in the namespace sds-test does not have the appropriate permissions to list pods. You are probably not specifying a service account when you deploy. K8s will automatically assign you the default service account.

You need to create a ServiceAccount . Grant it the required access using a Role and RoleBinding . Then update your Deployment / Pod to use your newly created ServiceAccount . Details of which can be found here