Rancher Server 设置
- Rancher 版本：2.6.0
下游集群信息
- Kubernetes 版本: v1.21.14-eks-fb459a0
- Cluster Type (Local/Downstream):
- 托管的eks
用户信息
- 登录用户的角色是什么？ （管理员/集群所有者/集群成员/项目所有者/项目成员/自定义）：
- 管理员：
主机操作系统： centos7
问题描述：
无法给项目添加删除成员
重现步骤：
进行BRAC添加集群meber
结果：
预期结果：
截图：
其他上下文信息：
日志
2022/11/10 03:45:23 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:23 [ERROR] error syncing 'p-dh6dj/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:23 [ERROR] error syncing 'p-l84xp/creator-rt-z4pmb': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, requeuing
2022/11/10 03:45:23 [ERROR] error syncing 'p-7dmh8/creator-rt-z4pmb': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, requeuing
2022/11/10 03:45:26 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:26 [ERROR] error syncing 'p-l6gj8/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:26 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:26 [ERROR] error syncing 'p-4d4hc/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:29 [ERROR] error syncing 'p-2625x/prtb-hss7h': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, handler cluster-prtb-sync: failed to remove finalizer on clusterscoped.controller.cattle.io/cluster-prtb-sync_c-m-xmdshn4q, requeuing
2022/11/10 03:45:29 [ERROR] error syncing 'p-2625x/prtb-nkzb7': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, handler cluster-prtb-sync: failed to remove finalizer on clusterscoped.controller.cattle.io/cluster-prtb-sync_c-m-xmdshn4q, requeuing
2022/11/10 03:45:29 [ERROR] error syncing 'p-2625x/prtb-tbndx': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, handler cluster-prtb-sync: failed to remove finalizer on clusterscoped.controller.cattle.io/cluster-prtb-sync_c-m-xmdshn4q, requeuing
2022/11/10 03:45:29 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:30 [ERROR] error syncing 'p-djmcz/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:30 [ERROR] error syncing 'p-2625x/prtb-tjvbj': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, handler cluster-prtb-sync: failed to remove finalizer on clusterscoped.controller.cattle.io/cluster-prtb-sync_c-m-xmdshn4q, requeuing
2022/11/10 03:45:32 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:32 [ERROR] error syncing 'p-b25hk/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:32 [ERROR] error syncing 'p-2625x/prtb-2dzqm': handler mgmt-auth-prtb-controller: failed to remove finalizer on controller.cattle.io/mgmt-auth-prtb-controller, handler cluster-prtb-sync: failed to remove finalizer on clusterscoped.controller.cattle.io/cluster-prtb-sync_c-m-xmdshn4q, requeuing
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-sgjbr Role read-only
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-sgjbr Role view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-cqm5s Role read-only
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-cqm5s Role view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-cqm5s Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-sgjbr Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-27rzf Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-wn9vl Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-dbzmr Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-b9f5d Role read-only
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-b9f5d Role view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-xvtjx Role read-only
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-xvtjx Role view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-dbzmr Role view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-dbzmr Role read-only
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-b9f5d Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating roleBinding User u-xvtjx Role monitoring-ui-view
2022/11/10 03:45:37 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:37 [ERROR] error syncing 'wilmar-wgo-ns-prod': handler namespace-auth: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022-11-10 03:45:38.256189 I | mvcc: store.index: compact 134656580
2022-11-10 03:45:38.329854 I | mvcc: finished scheduled compaction at 134656580 (took 69.879653ms)
2022/11/10 03:45:39 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:39 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:39 [ERROR] error syncing 'p-htnqd/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:39 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:39 [ERROR] error syncing 'p-h5qtt/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:39 [ERROR] error syncing 'p-cvtsf/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:39 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:39 [INFO] Creating clusterRole for roleTemplate test (rt-z4pmb).
2022/11/10 03:45:39 [ERROR] error syncing 'p-d4spf/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing
2022/11/10 03:45:39 [ERROR] error syncing 'p-2sqnk/creator-rt-z4pmb': handler cluster-prtb-sync: couldn't ensure roles: couldn't create clusterRole rt-z4pmb: ClusterRole.rbac.authorization.k8s.io "rt-z4pmb" is invalid: [rules[0].apiGroups: Required value: resource rules must supply at least one api group, rules[0].resources: Required value: resource rules must supply at least one resource], requeuing