kubernetes - 无法创建策略 : 'no matches for kind "Policy"'

Question

我正在按照说明操作 here关于如何创建策略来审计 Kubernetes 中的操作。

当我运行以下 YAML 文件时:

kubectl apply -f - <<EOF  
apiVersion: audit.k8s.io/v1 # This is required.
kind: Policy
# Don't generate audit events for all requests in RequestReceived stage.
omitStages:
  - "RequestReceived"
rules:
  # Log pod changes at RequestResponse level
  - level: RequestResponse
    resources:
    - group: ""
      # Resource "pods" doesn't match requests to any subresource of pods,
      # which is consistent with the RBAC policy.
      resources: ["pods"]
EOF

我收到以下错误:

error: unable to recognize "STDIN": no matches for kind "Policy" in version "audit.k8s.io/v1"

我试图改变 apiVersion至 audit.k8s.io/v1beta1还有 v1但它因同样的错误而失败。

注意标志 --audit-policy-file没有出现在 /etc/kubernetes/manifests/kube-apiserver.yaml但我不认为这是相关的，因为这只是关于创建一个对象。

如需转载可以到 https://labs.play-with-k8s.com ，创建集群并尝试创建策略。

Answer 1

在 Kubernetes 1.11 上得到相同的使用:

apiVersion: audit.k8s.io/v1

通过更改为固定:

apiVersion: audit.k8s.io/v1beta1