Lens 创建 Service Accounts 及分配权限

是一款开源的 Kubenretes IDE 也可以作为桌面客户端，官方网站 https://k8slens.dev，具有以下特性：

• 完全开源 GitHub 地址 https://github.com/lensapp/lens

• 实时展示集群状态

• 内置 Prometheus 监控

• 多集群，多个 namespace 管理

• 原生 Kubernetes 支持

• 支持使用 chart 安装应用

• 使用 kubeconfig 登陆认证

• 支持多平台，Windows、Mac、Linux

• Visual Studio Code 友好的风格设计

1、创建 Servcie Accounts

 2、创建一个 Cluster Role

 3、修改Cluster Role

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: cluster-role
  uid: 7d36b90b-2407-428b-b2d9-744964ae962f
  resourceVersion: '1005840'
  creationTimestamp: '2021-09-17T06:27:29Z'
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: >
      {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"creationTimestamp":"2021-09-17T06:27:29Z","name":"devops-role","selfLink":"/apis/rbac.authorization.k8s.io/v1/clusterroles/devops-role","uid":"7d36b90b-2407-428b-b2d9-744964ae962f"},"rules":[{"apiGroups":[""],"resources":["pods","pods/exec","pods/log"],"verbs":["*"]},{"apiGroups":[""],"resources":["services"],"verbs":["list","get","watch"]}]}
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/devops-role

# 添加的内容
rules:
  - verbs:
      - '*'
    apiGroups:
      - ''
    resources:
      - pods
      - pods/exec
      - pods/log
  - verbs:
      - list
      - get
      - watch
    apiGroups:
      - ''
    resources:
      - services

4、把 Service Account 用户绑定到 Cluster Role