'Istiod was not restarted after IstioCA was updated
Description Recently the IstioCA got updated on aws-sandbox env but the CAS controller did not restart the IstioD pods. The CA got renewed on 16/04/2022. The Istio cert got rotated on 18/04.
Possible errors:
E0321 08:42:49.647580 1 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1.MutatingWebhookConfiguration: failed to list *v1.MutatingWebhookConfiguration: mutatingwebhookconfigurations.admissionregistration.k8s.io is forbidden: User "system:serviceaccount:chi-cas-controller:chi-cas-controller" cannot list resource "mutatingwebhookconfigurations" in API group "admissionregistration.k8s.io" at the cluster scope
E0321 08:42:49.523922 1 reflector.go:138] pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:167: Failed to watch *v1.Pod: unknown (get pods)
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|