<p>I recently created a cluster on EKS with eksctl. <code>kubectl logs -f mypod-0</code> bumps into Authorization error:</p>

<p><code>Error from server (InternalError): Internal error occurred: Authorization error (user=kube-apiserver-kubelet-client, verb=get, resource=nodes, subresource=proxy)
</code>
Any advice and insight is appreciated</p>

<p>You would need to create a ClusterRoleBinding with a Role pointing towards the user : kube-apiserver-kubelet-client</p>

<pre><code>kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: kubelet-api-admin
subjects:
- kind: User
  name: kube-apiserver-kubelet-client
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: ClusterRole
  name: system:kubelet-api-admin
  apiGroup: rbac.authorization.k8s.io
</code></pre>

<p>kubelet-api-admin is usually a role that has the necessary permissions, but you can replace this with an apt role. </p>
