robertluoxu opened a new issue, #8552:
URL: https://github.com/apache/apisix/issues/8552

   ### Description
   
   restart apisix pod, have a error
   
   2022/12/22 07:45:16 [error] 65#65: *324504 [lua] informer_factory.lua:295: 
list failed, kind: Endpoints, reason: Forbidden, message : 
{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"endpoints
 is forbidden: User \"system:serviceaccount:gateway:default\" cannot list 
resource \"endpoints\" in API group \"\" at the cluster 
scope","reason":"Forbidden","details":{"kind":"endpoints"},"code":403}
   
   config.yaml
   `
   config.yaml
   apisix:
     node_listen:
       - 9080
     admin_key:
       - name: admin
         key: edd1c9f034335f136f87ad84b625c8f1
         role: admin
     ssl:
       enable: true
       ssl_trusted_certificate: /etc/kubernetes/sslca.pem
   
     allow_admin:
   
    #   - 127.0.0.0/24
   
   etcd:
     host:
       - https://myetcdip1:2379
       - https://myetcdip2:2379
       - https://myetcdip3:2379
     tls:
       cert: /etc/kubernetes/ssl/etcd.pem
       key: /etc/kubernetes/ssl/etcdpem
       verify: false
   nginx_config:
     error_log: logs/error.log
     error_log_level:  warn
   discovery:
     kubernetes:  { }
   `
   
   up
   `
   {
     "timeout": {
       "connect": 6,
       "send": 6,
       "read": 6
     },
     "type": "roundrobin",
     "scheme": "http",
     "discovery_type": "kubernetes",
     "pass_host": "pass",
     "name": "traffic",
     "service_name": "traffic/mew-traffic-webapi:tcp9000",
     "keepalive_pool": {
       "idle_timeout": 60,
       "requests": 1000,
       "size": 320
     }
   }
   `
   
   ### Environment
   
   - APISIX version (run `apisix version`):  2.15.0
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to