二进制搭建的k8s集群。
查看pod日志时，报权限错误

root@k8s-master:~# kubectl logs coredns-85cf76fcdc-kg266 -n kube-system
Error from server (Forbidden): Forbidden (user=kube-apiserver, verb=get, resource=nodes, subresource=proxy) ( pods/log coredns-85cf76fcdc-kg266)

这个错误是说 kube-apiserver这个用户没有权限查看日志，我们要给这个用户一个admin的角色权限就好了

解决执行：

kubectl create clusterrolebinding kube-apiserver   --clusterrole=cluster-admin   --user=kube-apiserver

再次查看

root@k8s-master:~# kubectl logs coredns-85cf76fcdc-kg266 -n kube-system
.:53
[INFO] plugin/reload: Running configuration MD5 = b0741fcbd8bd79287446297caa87f7a1
CoreDNS-1.7.0
linux/amd64, go1.14.4, f59c03d
[FATAL] plugin/loop: Loop (127.0.0.1:48987 -> :53) detected for zone ".", see https://coredns.io/plugins/loop#troubleshooting. Query: "HINFO 9155896630705917116.6231196224604355166."