title: Why would kubectl logs return Authorization error?
body: <p>I am trying to get logs from a pod that is running using <code>kubectl logs grafana-6bfd846fbd-nbv8r</code>
  and I am getting the following output:</p>
  <pre><code>Error from server (InternalError): Internal error occurred: Authorization error (user=kube-apiserver, verb=get, resource=nodes, subresource=proxy)
  </code></pre>
  <p>I tried to figure why I would not have this specific authorisation even though I can manage everything with this user, no clue. The weirdest is that when I run <code>kubectl auth can-i get pod/logs</code> I get:</p>
  <pre><code>yes
  </code></pre>
  <p>After a few hours of going through ClusterRoles and ClusterRoleBindings, I am getting stuck and do know what to do to be authorized. Thanks for your help!</p>