search

kubernetes-sigs / sig-windows-dev-tools

This is a batteries included local development environment for Kubernetes on Windows.
Apache License 2.0
80 stars 46 forks source link

calico: User "system:serviceaccount:kube-system:calico-node" cannot list resource "endpointslices" in API group "discovery.k8s.io" #179

Closed dougsland closed 2 years ago

dougsland commented 2 years ago

Pod calico-node not coming up.

Example: kube-system calico-node-rm2pl 0/1 Running 0 25m

2022-01-23 19:01:04.265 [INFO][50] felix/kubeendpointslice.go 101: Unable to list K8s EndpointSlice
resources error=endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:
calico-node" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope
2022-01-23 19:01:04.265 [INFO][50] felix/watchercache.go 186: Failed to perform list of current data during
resync ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" error=connection is
unauthorized:  endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:
kube-system:calico-node" cannot list resource "endpointslices" in API group "discovery.k8s.io" 
at the cluster scope
dougsland commented 2 years ago

patch is merged, all green now. /close