Jenkins Kubernetes Serviceaccount无法列出Pod

Question

使用以下命令为Jenkins创建服务帐户后：

kubectl -n jenkins create sa jenkins

kubectl create clusterrolebinding jenkins --clusterrole cluster-admin --serviceaccount=jenkins:jenkins

在Jenkins中添加证书(Manage Jenkins --> Configure System --> Add Cloud)时，我收到错误消息

Error connecting to https://169.46.7.238:21769: 
Failure executing: GET at: 
https://169.46.7.238:21769/api/v1/namespaces/jenkins/pods. 
Message: Forbidden!Configured service account doesn't have access. 
Service account may have been revoked. 
User "system:serviceaccount:jenkins:default" cannot list pods in the namespace "jenkins"..

看起来Jenkins试图使用default服务帐户。

如何解决这个问题？

Answer 1

以防万一，您是否可以尝试创建服务帐户system:serviceaccount:jenkins:default而不是jenkins

Answer 2

这个是work for me kubectl create clusterrolebinding jenkins --clusterrole cluster-admin --serviceaccount=jenkins:default