Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing "list"verb for pods resulting in error in logs #1357

Open
daniel-pebble opened this issue Nov 14, 2024 · 0 comments
Open

Missing "list"verb for pods resulting in error in logs #1357

daniel-pebble opened this issue Nov 14, 2024 · 0 comments

Comments

@daniel-pebble
Copy link

What happened:
On a fresh installation, using the thick plugin, I can see the following errors in the logs.

E1114 09:20:04.454203 4190955 reflector.go:147] k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Pod: failed to list *v1.Pod: pods is forbidden: User "system:serviceaccount:kube-system:multus" cannot list resource "pods" in API group "" at the cluster scope

What you expected to happen:
There to be no error in the log

How to reproduce it (as minimally and precisely as possible):
Deploy the latest thick deployment https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/deployments/multus-daemonset-thick.yml

Once a pod is running check the logs.
Anything else we need to know?:
I was able to remove it by editing the multus clusterrole by adding the list the lib verb.

  • apiGroups:
    • ""
      resources:
    • pods
    • pods/status
      verbs:
    • get
    • update
    • list

Environment:

  • Multus version: snapshot-thick
  • Kubernetes version (use kubectl version): v1.30.0
  • Primary CNI for Kubernetes cluster: containerd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant