billowy-smartphone-2833
05/18/2023, 7:56 AMbland-account-99790
05/18/2023, 1:42 PMkubectl get service -A -o wide
?billowy-smartphone-2833
05/18/2023, 5:33 PMNAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR
default hello-world ClusterIP 10.43.186.203 <none> 80/TCP 12h app=hello-world
default kubernetes ClusterIP 10.43.0.1 <none> 443/TCP 31h <none>
kube-system kube-dns ClusterIP 10.43.0.10 <none> 53/UDP,53/TCP,9153/TCP 31h k8s-app=kube-dns
kube-system metrics-server ClusterIP 10.43.178.48 <none> 443/TCP 31h k8s-app=metrics-server
kube-system traefik LoadBalancer 10.43.90.30 10.192.177.101 80:32097/TCP,443:31916/TCP 31h app=traefik,release=traefik
kube-system traefik-prometheus ClusterIP 10.43.95.70 <none> 9100/TCP 31h app=traefik,release=traefik
bland-account-99790
05/19/2023, 5:45 AMbillowy-smartphone-2833
05/19/2023, 9:28 AMbland-account-99790
05/19/2023, 10:59 AMkubectl get ingress -A -o yaml
kubectl get endpoints -A
kubectl logs traefik.... -n kube-system
billowy-smartphone-2833
05/19/2023, 12:02 PMbland-account-99790
05/19/2023, 12:26 PMingressClassName: traefik
, that is not part of https://www.jeffgeerling.com/blog/2022/quick-hello-world-http-deployment-testing-k3s-and-traefik#comment-32065? Are you adding extra stuff yourself?billowy-smartphone-2833
05/19/2023, 1:02 PMbland-account-99790
05/19/2023, 1:03 PMkubectl get ClusterRole traefik-kube-system -o yaml
?billowy-smartphone-2833
05/19/2023, 1:54 PMbland-account-99790
05/19/2023, 1:57 PMkubectl get ClusterRole traefik-kube-system -o yaml
?billowy-smartphone-2833
05/19/2023, 1:58 PMbland-account-99790
05/19/2023, 2:01 PMClusterRole traefik-kube-system
does not existkubectl get ClusterRole traefik -o yaml
?billowy-smartphone-2833
05/19/2023, 2:02 PMbland-account-99790
05/19/2023, 2:08 PMkubectl get deployment/traefik -n kube-system -o yaml
? And then verify there is a clusterRoleBinding
mapping that serviceAccount with the ClusterRole you just showed me?E0519 12:01:23.503152 1 reflector.go:205] <http://github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86|github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86>: Failed to list *v1.Service: Unauthorized
E0519 12:01:24.503507 1 reflector.go:205] <http://github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86|github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86>: Failed to list *v1.Endpoints: Unauthorized
To get authorization, traefik serviceAccount should have the proper permissionsbillowy-smartphone-2833
05/19/2023, 2:12 PMbland-account-99790
05/19/2023, 2:17 PMserviceAccount: traefik
serviceAccountName: traefik
billowy-smartphone-2833
05/19/2023, 2:17 PMbland-account-99790
05/19/2023, 2:20 PMbillowy-smartphone-2833
05/19/2023, 2:24 PMbland-account-99790
05/19/2023, 2:25 PM