sweetpotatoman commented on issue #7026:
URL: https://github.com/apache/apisix/issues/7026#issuecomment-1124583523
> > log message
> > ```
> > 2022/05/12 03:37:55 [info] 43#43: *35664 [lua] init.lua:317: nodes():
get empty endpoint version from discovery DICT testnet/explorer-reader, client:
172.20.4.221, server: _, request: "GET /explorer/graphiql HTTP/1.1", host:
"xxx-api.xxx.io"
> > ```
>
> Log message shows that Kubernetes Discovery did not get
"testnet/explorer-reader" endpoints value from k8s
>
> Can you provide the ServiceAccount information used by the pod where
apisix is located? We need to make sure this ServiceAccount has the permission
of ListWatch Endpoints
```
apiVersion: v1
kind: ServiceAccount
metadata:
name: apisix
namespace: apisix
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: apisix
rules:
- apiGroups: [""]
resources: ["namespaces"]
verbs: ["get", "list", "watch"]
- apiGroups: [""]
resources: ["services", "endpoints"]
verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: apisix
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: apisix
subjects:
- kind: ServiceAccount
name: default
namespace: apisix
```
Not working.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
