kubesphere: Installed inside k8S and an error: Error from server (Forbidden)

Hi my k8s version is v1.18.10, But I got an installation error,Please take a look

Here is the log

TASK [ks-core/prepare : KubeSphere | Checking core components (1)] *************
changed: [localhost]

TASK [ks-core/prepare : KubeSphere | Checking core components (2)] *************
changed: [localhost]

TASK [ks-core/prepare : KubeSphere | Checking core components (3)] *************
skipping: [localhost]

TASK [ks-core/prepare : KubeSphere | Checking core components (4)] *************
skipping: [localhost]

TASK [ks-core/prepare : KubeSphere | Updating ks-core status] ******************
skipping: [localhost]

TASK [ks-core/prepare : set_fact] **********************************************
skipping: [localhost]

TASK [ks-core/prepare : KubeSphere | Creating KubeSphere directory] ************
ok: [localhost]

TASK [ks-core/prepare : KubeSphere | Getting installation init files] **********
changed: [localhost] => (item=ks-init)

TASK [ks-core/prepare : KubeSphere | Checking account init] ********************
fatal: [localhost]: FAILED! => {"changed": true, "cmd": "/usr/local/bin/kubectl get users admin\n", "delta": "0:00:00.078093", "end": "2021-10-20 14:17:03.669795", "failed_when_result": true, "msg": "non-zero return code", "rc": 1, "start": "2021-10-20 14:17:03.591702", "stderr": "Error from server (Forbidden): users.management.loft.sh \"admin\" is forbidden: User \"system:serviceaccount:kubesphere-system:ks-installer\" cannot get resource \"users\" in API group \"management.loft.sh\" at the cluster scope", "stderr_lines": ["Error from server (Forbidden): users.management.loft.sh \"admin\" is forbidden: User \"system:serviceaccount:kubesphere-system:ks-installer\" cannot get resource \"users\" in API group \"management.loft.sh\" at the cluster scope"], "stdout": "", "stdout_lines": []}

PLAY RECAP *********************************************************************
localhost                  : ok=5    changed=3    unreachable=0    failed=1    skipped=8    rescued=0    ignored=0

About this issue

  • Original URL
  • State: closed
  • Created 3 years ago
  • Comments: 15 (7 by maintainers)

Most upvoted comments

unable to retrieve the complete list of server APIs: cluster.loft.sh/v1: the server is currently unable to handle the request, management.loft.sh/v1: the server is currently unable to handle the request, tenancy.kiosk.sh/v1alpha1: the server is currently unable to handle the request

cluster.loft.sh/v1 management.loft.sh/v1 tenancy.kiosk.sh/v1alpha1

The failures caused by these three api exceptions, are they still useful? If it is useless, you can delete them.

It can be checked by the following command.

kubectl get apiservice