calvinyu 我看了一下kube-state-merices的状态是running，但日志报sa没有权限
E0521 03:56:25.876595 1 reflector.go:125] k8s.io/kube-state-metrics/internal/store/builder.go:295: Failed to list *v1.StorageClass: storageclasses.storage.k8s.io is forbidden: User “system:serviceaccount:kubesphere-monitoring-system:kube-state-metrics” cannot list resource “storageclasses” in API group “storage.k8s.io” at the cluster scope
E0521 03:56:26.873961 1 reflector.go:125] k8s.io/kube-state-metrics/internal/store/builder.go:295: Failed to list *v1beta1.CertificateSigningRequest: certificatesigningrequests.certificates.k8s.io is forbidden: User “system:serviceaccount:kubesphere-monitoring-system:kube-state-metrics” cannot list resource “certificatesigningrequests” in API group “certificates.k8s.io” at the cluster scope
