Kubernetes RBAC - forbidden attempt to grant extra privileges
问题 I'm using Kubernetes v1.8.14 on custom built CoreOS cluster: $ kubectl version --short Client Version: v1.10.5 Server Version: v1.8.14+coreos.0 When trying to create the following ClusterRole : $ cat ClusterRole.yml --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: kubernetes.io/bootstrapping: rbac-defaults name: system:coredns rules: - apiGroups: - "" resources: - endpoints - services - pods - namespaces verbs: - list - watch I get the following error: $