Andrej
Hi, In our environment we seems to have similar issues. As workaround we recreate consul-webhook-cert-manager pod. This is quite important to fix because if API fails to authenticate to consul...
Hi, I'm not sure about how easy is to reproduce the behavior, because it's still unclear when this happens. Here is how the 3 day log of webhook cert manager...
Believe that this might be related to the nodes restart as we saw similar behaviour right after the maintenance where worker nodes were restarted one by one.
[BUG] "Failed to watch... the server could not find the requested resource" messages printed in logs
Hi, Have got same the errors right after applying policy [https://kyverno.io/policies/best-practices/check_deprecated_apis/](https://kyverno.io/policies/best-practices/check_deprecated_apis/) in the AKS cluster ``` E0913 13:53:47.810967 1 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *unstructured.Unstructured: failed to list *unstructured.Unstructured: the...
[BUG] "Failed to watch... the server could not find the requested resource" messages printed in logs
After upgrade to version 1.5.0 I still see this error: ``` pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *unstructured.Unstructured: failed to list *unstructured.Unstructured: the server does not allow this method on the requested...
I have faced something very similar and was able to fix it by setting up Azure Pod Identity for opencost deployment. For this u need to have addon enabled on...
@pl4nty I have not tested AAD Workload Identities in terms of OpenCost, but I have plans to do it in upcoming days. Will let u know about result.
@pl4nty Just tested OpenCost with Azure Workload Identity unfortunately it's not working using this approach. Most probably [https://github.com/AzureAD/microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) should be integrated into OpenCost.
@komapa Didn't catch your answer to be honest... It's has type array that means you can put several ip's or hostname.
Actually u can put here an array of host names or ip's, but it will pickup the first one. Anyway consul-datplane container recognises remaining servers in consul cluster and starts...