kubernetes localhost:8080被上下文拒绝

Question

Kubernets群集是使用阿里巴巴容器服务设置的，使用根帐户访问群集没有问题，当创建一个新名称空间并向该名称空间添加用户时，它会抛出与服务器localhost:8080的连接被拒绝的错误

下面是疑难解答的设置

定义了名称空间dev，并使用get verb显示所有kubernetes名称空间。

root@kube-master:# kubectl get namespaces
NAME          STATUS    AGE
default       Active    14d
dev           Active    56m
kube-public   Active    14d
kube-system   Active    14d

在Kubernetes集群中添加了新上下文。

kubectl config set-context dev  --namespace=dev --user=user1

当使用kubectl CLI与此配置文件时，我应该得到一个拒绝访问的错误

root@kube-master:/home/ansible# kubectl --context=dev get pods
The connection to the server localhost:8080 was refused - did you specify the right host or port?

而不是显示与服务器本地主机的连接：8080被拒绝

如果没有上下文，它的效果非常好

root@kube-master:# kubectl get pods -n dev
NAME      READY     STATUS    RESTARTS   AGE
busybox   1/1       Running   1          1h

这是kubernetes配置视图

root@kube-master:/home/ansible# kubectl config view
apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: REDACTED
    server: https://172.16.2.13:6443
  name: kubernetes
contexts:
- context:
    cluster: ""
    namespace: dev
    user: user1
  name: dev
- context:
    cluster: kubernetes
    user: kubernetes-admin
  name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-admin
  user:
    client-certificate-data: REDACTED
    client-key-data: REDACTED

root@kube-master:# kubectl config get-contexts
CURRENT   NAME                          CLUSTER      AUTHINFO           NAMESPACE
          dev                                        user1              dev
*         kubernetes-admin@kubernetes   kubernetes   kubernetes-admin   

Answer 1

我明白了，我在执行命令时注意到了什么

kubectl config view

集群显示为空

- context:
    cluster: ""
    namespace: dev
    user: user1

要解决此问题，添加了--集群信息，并修改了set上下文

root@kube-master:/home/ansible# kubectl config set-context dev --cluster=kubernetes --namespace=dev --user=user1
Context "dev" modified.

而且上下文设置正确

contexts:
- context:
    cluster: kubernetes
    namespace: dev
    user: user1
  name: dev

当我用--context=dev

root@kube-master:/home/ansible# kubectl --context=dev get pods
No resources found.
Error from server (Forbidden): pods is forbidden: User "system:anonymous" cannot list pods in the namespace "dev"