Kube.netes Cluster-AutoScaler 错误：无法观看 *v1.CSIDriver

Question

我正在尝试为我的 kube.netes 集群设置一个集群自动缩放器，当我查看自动缩放器日志时，我看到了这些错误消息：

1 reflector.go:138] k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: csidrivers.storage.k8s.io is forbidden: User "system:serviceaccount:kube-system:cluster-autoscaler" cannot list resource "csidrivers" in API group "storage.k8s.io" at the cluster scope
E0922 10:14:33.794709       1 reflector.go:138] k8s.io/client-go/informers/factory.go:134: Failed to watch *v1beta1.CSIStorageCapacity: failed to list *v1beta1.CSIStorageCapacity: csistoragecapacities.storage.k8s.io is forbidden: User "system:serviceaccount:kube-system:cluster-autoscaler" cannot list resource "csistoragecapacities" in API group "storage.k8s.io" at the cluster scope
I0922 10:14:35.491641       1 reflector.go:255] Listing and watching *v1.Namespace from k8s.io/client-go/informers/factory.go:134
E0922 10:14:36.196200       1 reflector.go:138] k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Namespace: failed to list *v1.Namespace: namespaces is forbidden: User "system:serviceaccount:kube-system:cluster-autoscaler" cannot list resource "namespaces" in API group "" at the cluster scope

任何人都可能知道可能是什么问题？

谢谢

Answer 1

只需确保cluster- autoscaler 有权使用资源csidrivers ，您就可以编辑 RBAC 并添加对storage.k8s.io的访问权限

用这个编辑集群角色

- apiGroups:
  - storage.k8s.io
  resources:
  - storageclasses
  - csinodes
  - csidrivers
  - csistoragecapacities
  verbs:
  - watch
  - list
  - get

Answer 2

cluster-autoscaler 的 RBAC 缺少对错误中提到的资源的权限