Problem
Unable to access Kube API as anonymous user.
Cause
Anonymous user role is not created to access Kube API
Fix
Create Role binding to access Kubectl API through webapplication as anonymous user
- kubectl create rolebinding anonymous --clusterrole=cluster-admin --user=system:anonymous --namespace=default
...
Problem
"system:serviceaccount:default:default" cannot list pods in the namespace "default"
Cause
system:serviceaccount not found
Fix
use the below command to create the cluster role and binds all services
- kubectl create clusterrolebinding serviceaccounts-cluster-admin --clusterrole=cluster-admin --group=system:serviceaccounts