https://rancher.com/ logo
Title
g

gentle-hospital-95414

05/04/2023, 7:15 PM
Hi, I'm using rancher with an RKE1 cluster which I've been using for many months. I recently upgraded the cluster to k8s 1.24.13 and started getting the following error when deploying using
kubectl apply -k ...
(using kustomize to deploy several manifests):
error: error validating "kustomization/juicy-staging": error validating data: the server has asked for the client to provide credentials; if you choose to ignore these errors, turn validation off with --validate=false
This seems to be a simple authentication issue, but I can execute any other kubectl command I can think of without issue, and the kustomize deployment even works if I add
--validate=false
. I'll add some more detail in a thread.
It seems like a specific API call to rancher is failing. When I add
-v 6
to the kubectl command, I see a few HTTP GET reqeusts succeed, then one fail with 401. The failing request is to
<https://server-domain/openapi/v3/api/v1?hash=...&timeout=32s>
Has anyone seen this problem before? I don't know enough about the rancher APIs to know if there is some permission I might be missing, but as I mentioned initially, I haven't had any issues like this on the rancher installation or k8s cluster for most of a year.
Thanks for any advice.