Pod“mysql”被禁止:没有为服务帐户默认/默认findAPI令牌

我有以下的mysql.yaml文件:

apiVersion: v1beta3 kind: Pod metadata: name: mysql labels: name: mysql spec: containers: - resources: limits : cpu: 1 image: mysql name: mysql env: - name: MYSQL_ROOT_PASSWORD # change this value: yourpassword ports: - containerPort: 3306 name: mysql 

运行kubectl create -f mysql.yaml gives the error

 Error from server: error when creating "mysql.yaml": Pod "Unknown" is forbidden: no API token found for service account default/default, retry after the token is automatically created and added to the service account 

我有一个硕士和一个节点两个centos 7.1。

为了让你的设置工作,你可以做同样的事情local-up-cluster.sh正在做:

  1. 生成一个签名密钥:

openssl genrsa -out /tmp/serviceaccount.key 2048

  1. 更新/etc/kubernetes/apiserver

KUBE_API_ARGS="--service_account_key_file=/tmp/serviceaccount.key"

  1. 更新/etc/kubernetes/controller-manager

KUBE_CONTROLLER_MANAGER_ARGS="--service_account_private_key_file=/tmp/serviceaccount.key"

https://github.com/kubernetes/kubernetes/issues/11355#issuecomment-127378691