You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After upgrade to 1.32 the following error is logged every 5 seconds:
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008949]: Error from server (Forbidden): pods is forbidden: User "system:node:myhostname" cannot list resource "pods" in API group "" at the cluster scope: can only list/watch pods with spec.nodeName field selector
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: Traceback (most recent call last):
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/scripts/kill-host-pods.py", line 104, in <module>
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: main()
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/usr/lib/python3/dist-packages/click/core.py", line 764, in __call__
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: return self.main(*args, **kwargs)
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/usr/lib/python3/dist-packages/click/core.py", line 717, in main
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: rv = self.invoke(ctx)
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/usr/lib/python3/dist-packages/click/core.py", line 956, in invoke
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: return ctx.invoke(self.callback, **ctx.params)
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/usr/lib/python3/dist-packages/click/core.py", line 555, in invoke
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: return callback(*args, **kwargs)
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/scripts/kill-host-pods.py", line 84, in main
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: out = subprocess.check_output([*KUBECTL, "get", "pod", "-o", "json", *selector])
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/usr/lib/python3.8/subprocess.py", line 415, in check_output
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: return run(*popenargs, stdout=PIPE, timeout=timeout, check=True,
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: File "/snap/microk8s/7537/usr/lib/python3.8/subprocess.py", line 516, in run
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: raise CalledProcessError(retcode, process.args,
Dec 27 10:50:35 myhostname microk8s.daemon-apiserver-kicker[2008890]: subprocess.CalledProcessError: Command '['/snap/microk8s/7537/kubectl', '--kubeconfig=/var/snap/microk8s/7537/credentials/kubelet.config', 'get', 'pod', '-o', 'json', '-A']' returned non-zero exit status 1.
Adding AuthorizeNodeWithSelectors=false to --feature-gates in /var/snap/microk8s/current/args/kube-api-server silenced the error.
Is this an actual bug in 1.32, or could it be something with the configuration of my cluster?
The text was updated successfully, but these errors were encountered:
After upgrade to 1.32 the following error is logged every 5 seconds:
Adding
AuthorizeNodeWithSelectors=false
to--feature-gates
in/var/snap/microk8s/current/args/kube-api-server
silenced the error.Is this an actual bug in 1.32, or could it be something with the configuration of my cluster?
The text was updated successfully, but these errors were encountered: