<p>The Kubernetes dashboard outputs a bunch of error messages.</p>
<p>Should you ignore them?
If not, how do you fix them?</p>
<pre><code>warning
configmaps is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;configmaps&quot; in API group &quot;&quot; in the namespace &quot;default&quot;

warning
persistentvolumeclaims is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;persistentvolumeclaims&quot; in API group &quot;&quot; in the namespace &quot;default&quot;

warning
secrets is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;secrets&quot; in API group &quot;&quot; in the namespace &quot;default&quot;

warning
services is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;services&quot; in API group &quot;&quot; in the namespace &quot;default&quot;

warning
ingresses.extensions is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;ingresses&quot; in API group &quot;extensions&quot; in the namespace &quot;default&quot;

warning
daemonsets.apps is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;daemonsets&quot; in API group &quot;apps&quot; in the namespace &quot;default&quot;

warning
events is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;events&quot; in API group &quot;&quot; in the namespace &quot;default&quot;

warning
jobs.batch is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;jobs&quot; in API group &quot;batch&quot; in the namespace &quot;default&quot;

warning
cronjobs.batch is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;cronjobs&quot; in API group &quot;batch&quot; in the namespace &quot;default&quot;

warning
replicationcontrollers is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;replicationcontrollers&quot; in API group &quot;&quot; in the namespace &quot;default&quot;

warning
statefulsets.apps is forbidden: User &quot;system:serviceaccount:kube-system:deployment-controller&quot; cannot list resource &quot;statefulsets&quot; in API group &quot;apps&quot; in the namespace &quot;default&quot;
</code></pre>

Snowcrash
<p>It looks like your cluster is RBAC enabled and the deployment-controller  is missing a service account defined in the deployment-controller pod(s). You should be able to easily mitigate this issue by adding this SA and it's Roles/Bindings.</p>
<p>Two ways to do it.</p>
<p>You can create the binding with simple one liner from CLI or YAML way:</p>
<pre><code>$ kubectl create clusterrolebinding deployment-controller --clusterrole=cluster-admin --serviceaccount=kube-system:deployment-controller
</code></pre>
<p>If you want to define <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/" rel="noreferrer">ClusterRoleBinding</a> in <strong>YAML</strong> file - create the below file with some name say <code>dashboard-rb.yaml</code> and execute specific command:</p>
<pre><code>apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: deployment-controller
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: deployment-controller
  namespace: kube-system
</code></pre>
<pre><code> $ kubectl create -f dashboard-rb.yaml
</code></pre>
<p>Take a look: <a href="https://maheshkumar.wordpress.com/2019/01/26/k8s-kubernetes-dashboard-access-warnings/" rel="noreferrer">kubernetes-dashboard-access-warnings</a>,  <a href="https://unofficialism.info/posts/accessing-rbac-enabled-kubernetes-dashboard/" rel="noreferrer">accessing-rbac-enabled-kubernetes-dashboard</a>,  <a href="https://github.com/Azure/aks-engine/issues/805" rel="noreferrer">k8s-crb-warning</a>, <a href="https://stackoverflow.com/questions/48443138/kubernetes-dashboard-is-forbidden-all-over-the-site">kubernetes-dashboard-is-forbidden-all-over-the-site</a>.</p>
