How to fix namerd error?


#1

When I deploy namerd with ‘https://github.com/linkerd/linkerd-examples/blob/master/k8s-daemonset/k8s/namerd.yml’, the pod raise some errors:

E 0613 10:03:24.282 UTC THREAD26: retrying k8s request to /apis/l5d.io/v1alpha1/namespaces/default/dtabs on unexpected response code 403 with message {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"dtabs.l5d.io is forbidden: User \"system:serviceaccount:default:default\" cannot list dtabs.l5d.io in the namespace \"default\"","reason":"Forbidden","details":{"group":"l5d.io","kind":"dtabs"},"code":403}

How to fix it? Thanks.


#2

This looks like an RBAC issue. You’ll need to grant Namerd’s service account read and write access to the dtabs resource.


#3

Yes, I fixed this problem by apply the file of ‘https://github.com/linkerd/linkerd-examples/blob/master/k8s-daemonset/k8s/linkerd-rbac.yml
Thx.