[root@k8s-master ~]# kubectl logs nginx-dbddb74b8-j9rdf
error: You must be logged in to the server (the server has asked for the client to provide credentials ( pods/log nginx-dbddb74b8-j9rdf))
解决办法修改：/opt/kubernetes/cfg/kubelet.config添加
authentication:
  anonymous:
    enabled: true
 [root@k8s-node1 cfg]# cat kubelet.config 
kind: KubeletConfiguration
apiVersion: kubelet.config.k8s.io/v1beta1
address: 192.168.1.120
port: 10250
cgroupDriver: cgroupfs
clusterDNS:
- 10.0.0.2 
clusterDomain: cluster.local.
failSwapOn: false
authentication:
  anonymous:
    enabled: true

[root@k8s-master ~]# kubectl logs nginx-dbddb74b8-j9rdf
Error from server (Forbidden): Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy) ( pods/log nginx-dbddb74b8-j9rdf)
解决办法：将system:anonymous绑定到cluster-admin角色中 起个cluster-system:anonymous名字
[root@k8s-master ~]# kubectl create clusterrolebinding cluster-system:anonymous --clusterrole=cluster-admin --user=system:anonymous
clusterrolebinding.rbac.authorization.k8s.io/cluster-system:anonymous created