spark on k8s报错：User “system:serviceaccount:default:default“ cannot get resource “pods“ in API group

kubectl create serviceaccount spark
kubectl create clusterrolebinding spark-role --clusterrole=edit --serviceaccount=default:spark --namespace=default

#并在submit时添加如下参数
spark-submit --conf spark.kubernetes.authenticate.driver.serviceAccountName=spark

参考链接：
Spark on Kubernetes提交测试任务失败报错：User “system:serviceaccount:default:default” cannot get resource "pods