-->
  • Recent Articles

    cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope

    I've created a role and rolebinding. While i was trying to get the information of Deployments i was getting an error like following :


    E0831 08:14:08.698149       1 reflector.go:156] pkg/mod/k8s.io/client-go@v0.0.0-20191109102209-3c0d1af94be5/tools/cache/reflector.go:108: Failed to list *v1beta1.CertificateSigningRequest: certificatesigningrequests.certificates.k8s.io is forbidden: User "system:serviceaccount:kube-system:kube-state-metrics" cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope

    After Checking for few minutes, i got that "kube-state-metrics" is not having required privileges to query "certificatesigningrequests". I'm listing the role, so it can helpful for someone. 



    - apiGroups:
      - certificates.k8s.io
      resources:
      - certificatesigningrequests
      verbs: ["list", "watch"]
    

    No comments