Kubernetes中的外部DNS从版本1.11开始涉及istio

Question

从今天开始，在通过helm安装的externaldns版本1.11中，我遇到了这个问题。k8s提供商是牧场主，它是新鲜的，没有任何其他东西。配置与文档一致。请帮帮忙。

            time="2018-12-05T15:08:00Z" level=info msg="config: {Master: KubeConfig: Sources:[service ingress] Namespace: AnnotationFilter: FQDNTemplate: CombineFQDNAndAnnotation:false Compatibility: PublishInternal:false Provider:aws GoogleProject: DomainFilter:[] ZoneIDFilter:[] AWSZoneType:private AWSAssumeRole: AzureConfigFile:/etc/kubernetes/azure.json AzureResourceGroup: CloudflareProxied:false InfobloxGridHost: InfobloxWapiPort:443 InfobloxWapiUsername:admin InfobloxWapiPassword: InfobloxWapiVersion:2.3.1 InfobloxSSLVerify:true DynCustomerName: DynUsername: DynPassword: DynMinTTLSeconds:0 InMemoryZones:[] PDNSServer:http://localhost:8081 PDNSAPIKey: Policy:upsert-only Registry:txt TXTOwnerID:default TXTPrefix: Interval:1m0s Once:false DryRun:false LogFormat:text MetricsAddress::7979 LogLevel:info}"
            time="2018-12-05T15:08:00Z" level=info msg="Connected to cluster at https://10.43.0.1:443"
            time="2018-12-05T15:08:01Z" level=error msg="services is forbidden: User \"system:serviceaccount:external-dns:default\" cannot list services at the cluster scope"
            time="2018-12-05T15:09:01Z" level=error msg="services is forbidden: User \"system:serviceaccount:external-dns:default\" cannot list services at the cluster scope"
            time="2018-12-05T15:10:03Z" level=error msg="services is forbidden: User \"system:serviceaccount:external-dns:default\" cannot list services at the cluster scope"
            time="2018-12-05T15:11:03Z" level=error msg="services is forbidden: User \"system:serviceaccount:external-dns:default\" cannot list services at the cluster scope"
            time="2018-12-05T15:12:04Z" level=error msg="services is forbidden: User \"system:serviceaccount:external-dns:default\" cannot list services at the cluster scope"

Answer 1

只需在您的集群中执行此命令

kubectl create clusterrolebinding external-dns-admin --clusterrole=cluster-admin --group=system:serviceaccounts --namespace=external-dns