Failed to create watcher ListRoot="/calico/ipam/v2/assignment/" error=connection is unauthorized: unknown (get IPAMBlocks.crd.projectcalico.org) about operator HOT 2 CLOSED

Hi @mad01 , sorry for the late reply - looks like the issue you're running into was fixed with: 7ada115

That change is in operator v1.16.0+ but it looks like the manifests on the Calico on EKS install page still install operator v1.13.2 . We'll need to upgrade the manifests at https://github.com/aws/amazon-vpc-cni-k8s

In the meantime, a workaround might be to edit calico.yaml and change the tigera-operator image version to a newer version (operator v1.16.0+). You might need crds and/or RBAC added in the newer Calico version (you could pull the yaml from the operator installation manifest corresponding to the Calico version, e.g. operator v1.18.x installs Calico v3.19.x https://docs.projectcalico.org/archive/v3.19/manifests/tigera-operator.yaml)

from operator.

To build on what @lmm suggested, I think it should work to just install the manifest linked https://docs.projectcalico.org/archive/v3.19/manifests/tigera-operator.yaml, that will include the updated operator and associated RBAC.

from operator.