The error envoyextensionpolicies.gateway.envoyproxy.io is forbidden: When I upgrade version of helm to v1.0.1
quyenhoang96 opened this issue · comments
Log off error on Envoy Gateway
Namespace
envoy-gateway-system
Owner
ReplicaSet envoy-gateway-65677d4888
Pod
envoy-gateway-65677d4888-wdxlj
Container
envoy-gateway
Search...
W0424 07:44:18.394334 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:44:18.394364 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:45:11.095939 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:45:11.095973 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:45:52.532489 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:45:52.532519 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:46:37.979297 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:46:37.979332 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:47:25.545369 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:47:25.545401 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:47:58.338035 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:47:58.338065 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:48:52.120081 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:48:52.120111 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:49:49.549675 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:49:49.549711 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
W0424 07:50:46.905114 1 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
E0424 07:50:46.905147 1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.3/tools/cache/reflector.go:229: Failed to watch *v1alpha1.EnvoyExtensionPolicy: failed to list *v1alpha1.EnvoyExtensionPolicy: envoyextensionpolicies.gateway.envoyproxy.io is forbidden: User "system:serviceaccount:envoy-gateway-system:envoy-gateway" cannot list resource "envoyextensionpolicies" in API group "gateway.envoyproxy.io" at the cluster scope
<img width="1767" alt="Screenshot 2024-04-24 at 14 56 14" src="https://github.com/envoyproxy/gateway/assets/120354221/d615a2ac-bfb8-4aae-81fa-1bb2aaa3f639">
Hi @quyenhoang96!
That's odd, as EnvoyExtensionPolicy is not included in EG 1.0.1: https://github.com/envoyproxy/gateway/tree/v1.0.1/charts/gateway-helm/crds/generated
Can you maybe share the steps that you took to install and upgrade EG?