Open LinMoskovitch opened 3 months ago
The Kubernetes project currently lacks enough contributors to adequately respond to all issues.
This bot triages un-triaged issues according to the following rules:
lifecycle/stale
is appliedlifecycle/stale
was applied, lifecycle/rotten
is appliedlifecycle/rotten
was applied, the issue is closedYou can:
/remove-lifecycle stale
/close
Please send feedback to sig-contributor-experience at kubernetes/community.
/lifecycle stale
Hi, We are facing sporadic "Unauthorized" issues in k8s go-client creation:
pkg/mod/k8s.io/client-go@v0.28.5/tools/cache/reflector.go:229: Failed to watch <resource_kind>: the server has asked for the client to provide credentials (get <resource_kind>)
log: pkg/mod/k8s.io/client-go@v0.28.5/tools/cache/reflector.go:229: Failed to watch <resource_kind>: failed to list *<resource_kind>: Unauthorized
expirationSeconds
is configured to 10m, and the credentials rotation is configured to 80% of the expiration time (=480sec).We tried to replicate the issue in actual code flow using the following steps but had no luck:
expirationSeconds
to less than 10m.Has anyone else encountered this kind of issue? If so, do you have any suggestions on how to resolve or investigate it?
Thanks.