Skip to content

Unhandled errors in helm chart deploy: cannot list Resource Configmaps and Endpointslices #1515

@Lite5h4dow

Description

@Lite5h4dow

Welcome!

  • Yes, I've searched similar issues on GitHub and didn't find any.
  • Yes, I've searched similar issues on the Traefik community forum and didn't find any.

What version of the Traefik's Helm Chart are you using?

37.1.1

What version of Traefik are you using?

v3.5.2

What did you expect to happen ?

traefik starts

What did you notice instead ?

W0910 14:33:28.078083       1 reflector.go:569] k8s.io/[email protected]/tools/cache/reflector.go:251: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:traefik" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope
E0910 14:33:28.078196       1 reflector.go:166] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:251: Failed to watch *v1.EndpointSlice: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User \"system:serviceaccount:kube-system:traefik\" cannot list resource \"endpointslices\" in API group \"discovery.k8s.io\" at the cluster scope" logger="UnhandledError"
W0910 14:33:31.481967       1 reflector.go:569] k8s.io/[email protected]/tools/cache/reflector.go:251: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:traefik" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope
E0910 14:33:31.482085       1 reflector.go:166] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:251: Failed to watch *v1.EndpointSlice: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User \"system:serviceaccount:kube-system:traefik\" cannot list resource \"endpointslices\" in API group \"discovery.k8s.io\" at the cluster scope" logger="UnhandledError" 
W0910 14:33:53.857582       1 reflector.go:569] k8s.io/[email protected]/tools/cache/reflector.go:251: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:kube-system:traefik" cannot list resource "configmaps" in API group "" at the cluster scope                                                                                                                                                                                                                                   
E0910 14:33:53.857701       1 reflector.go:166] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:251: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User \"system:serviceaccount:kube-system:traefik\" cannot list resource \"configmaps\" in API group \"\" at the cluster scope" logger="UnhandledError"                                                                                                                                              
W0910 14:34:11.274249       1 reflector.go:569] k8s.io/[email protected]/tools/cache/reflector.go:251: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:traefik" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope                                                                                                                                                                                      
E0910 14:34:11.274360       1 reflector.go:166] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:251: Failed to watch *v1.EndpointSlice: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User \"system:serviceaccount:kube-system:traefik\" cannot list resource \"endpointslices\" in API group \"discovery.k8s.io\" at the cluster scope" logger="UnhandledError"                                                                                             
W0910 14:34:21.689064       1 reflector.go:569] k8s.io/[email protected]/tools/cache/reflector.go:251: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:traefik" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope                                                                                                                                                                                      
E0910 14:34:21.689147       1 reflector.go:166] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:251: Failed to watch *v1.EndpointSlice: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User \"system:serviceaccount:kube-system:traefik\" cannot list resource \"endpointslices\" in API group \"discovery.k8s.io\" at the cluster scope" logger="UnhandledError"                                                                                            
 W0910 14:34:32.915320       1 reflector.go:569] k8s.io/[email protected]/tools/cache/reflector.go:251: failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:kube-system:traefik" cannot list resource "configmaps" in API group "" at the cluster scope                                                                                                                                                                                                                                   
E0910 14:34:32.915466       1 reflector.go:166] "Unhandled Error" err="k8s.io/[email protected]/tools/cache/reflector.go:251: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps is forbidden: User \"system:serviceaccount:kube-system:traefik\" cannot list resource \"configmaps\" in API group \"\" at the cluster scope" logger="UnhandledError"

What are your values ?

image:
  registry: docker.io
  repository: traefik
  tag: v3
  pullPolicy: Always
env:
  - name: CF_DNS_API_TOKEN
    valueFrom:
      secretKeyRef:
        name: traefik-tokens
        key: cloudflare-token

ports:
  web:
    port: 80
    http:
      redirections:
        port: websecure
        scheme: https
        permanent: true
    forwardedHeaders:
      trustedIPs:
        - 10.0.0.0/8
  websecure:
    port: 443
    forwardedHeaders:
      trustedIPs:
        - 10.0.0.0/8
  ssh:
    port: 2202
    expose:
      default: true
    exposedPort: 2202
    protocol: TCP

  traefik:
    expose:
      port: 8080
      default: true

# ingressRoute:
#   dashboard:
#     enabled: true

providers:
  kubernetesGateway:
    enabled: true

certificatesResolvers:
  cloudflare:
    acme:
      dnsChallenge:
        provider: cloudflare

experimental:
  plugins:
    headerdump:
      moduleName: "github.com/jaybubs/headerdump"
      version: "v0.2.0"

    requestdump:
      moduleName: "github.com/cookielab/traefik-middleware-request-logger"
      version: "v0.0.7"

Additional Information

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions