cilium status にて forbidden:

ここに記載の方法を試したら直った: <a class="issue-link js-issue-link" data-error-text="Failed to load

Cilium にて cannot patch resource "nodes/status" in API group が発生する about my-home-kubernetes HOT 2 CLOSED

ktooi commented on July 17, 2024

Cilium にて cannot patch resource "nodes/status" in API group が発生する

from my-home-kubernetes.

Comments (2)

ktooi commented on July 17, 2024

ここに記載の方法を試したら直った: cilium/cilium#19816

$ cat << __EOT__ > cilium-workaround.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: cilium-node-patcher
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: "system:node"
subjects:
- apiGroup: ""
  kind: ServiceAccount
  name: cilium
  namespace: kube-system
  __EOT__
$ kubectl apply -f cilium-workaround.yaml

from my-home-kubernetes.

ktooi commented on July 17, 2024

上記コメントの操作を実施後、 cilium を v1.12.3 にバージョンアップした状態での cilium status の結果が下記。

$ cilium status
    /¯¯\
 /¯¯\__/¯¯\    Cilium:         OK
 \__/¯¯\__/    Operator:       OK
 /¯¯\__/¯¯\    Hubble:         disabled
 \__/¯¯\__/    ClusterMesh:    disabled
    \__/

DaemonSet         cilium             Desired: 6, Ready: 6/6, Available: 6/6
Deployment        cilium-operator    Desired: 2, Ready: 2/2, Available: 2/2
Containers:       cilium             Running: 6
                  cilium-operator    Running: 2
Cluster Pods:     59/65 managed by Cilium
Image versions    cilium             quay.io/cilium/cilium:v1.12.3: 6
                  cilium-operator    quay.io/cilium/operator-generic:v1.12.3: 2
$

from my-home-kubernetes.

Recommend Projects