I'm following this guide to setup Spire with Istio on local. Can you please help?
Encountering the following issue in the when I'm setting up the Istio.
istioctl install -f demo/istio-spire-config.yaml
Error Message
2023-09-05T13:20:05.327609Z warning envoy config external/envoy/source/common/config/grpc_stream.h:153 StreamSecrets gRPC config stream to sds-grpc closed: 3, workload is not authorized for the requested identities ["default"] thread=17
As per the video at 42:15, you've advised to create a resource of type "ClusterSPIFFEID", which I did. However, this issue is not getting resolved.
% k -n spire describe ClusterSPIFFEID service-account-spiffeid Name: service-account-spiffeid Namespace: Labels: <none> Annotations: <none> API Version: spire.spiffe.io/v1alpha1 Kind: ClusterSPIFFEID Metadata: Creation Timestamp: 2023-09-05T12:40:41Z Generation: 1 Managed Fields: API Version: spire.spiffe.io/v1alpha1 Fields Type: FieldsV1 fieldsV1: f:metadata: f:annotations: .: f:kubectl.kubernetes.io/last-applied-configuration: f:spec: .: f:dnsNameTemplates: f:spiffeIDTemplate: Manager: kubectl-client-side-apply Operation: Update Time: 2023-09-05T12:40:41Z Resource Version: 546 UID: a448b7de-5ed3-471d-b3c3-29f1147ff113 Spec: Dns Name Templates: {{ .PodMeta.Name }} Spiffe ID Template: spiffe://{{ .TrustDomain }}/ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }} Events: <none>
My spire server pod sporadically crashes, but could be unrelated, but still posting it here.
spire-server-0 1/2 CrashLoopBackOff 7 (24s ago) 29m
"spiffe:///spire-controller-manager-webhook" subject= subsystem_name=api
time="2023-09-05T13:37:17Z" level=debug msg="Rotating server SVID" subsystem_name=svid_rotator
time="2023-09-05T13:37:17Z" level=debug msg="Signed X509 SVID" expiration="2023-09-05T14:37:17Z" spiffe_id="spiffe:///spire/server" subsystem_name=svid_rotator
In the spire-controller-manager controller, I see the following error messages
rustDomain"} 2023-09-05T13:34:13Z INFO Starting EventSource {"controller": "pod", "controllerGroup": "", "controllerKind": "Pod", "source": "kind source: *v1.Pod"} 2023-09-05T13:34:13Z INFO Starting Controller {"controller": "pod", "controllerGroup": "", "controllerKind": "Pod"} 2023-09-05T13:34:13Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func1 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:49 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:50 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:34:13Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:34:13Z INFO entry-reconciler New unsupported fields in SPIRE server found {"fields": "hint"} 2023-09-05T13:34:13Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:34:13Z INFO Starting workers {"controller": "clusterspiffeid", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterSPIFFEID", "worker count": 1} 2023-09-05T13:34:13Z DEBUG Triggering reconciliation {"controller": "clusterspiffeid", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterSPIFFEID", "ClusterSPIFFEID": {"name":"service-account-spiffeid"}, "namespace": "", "name": "service-account-spiffeid", "reconcileID": "95b5733f-8571-463e-813b-c717a9359da0"} 2023-09-05T13:34:13Z INFO Starting workers {"controller": "clusterfederatedtrustdomain", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterFederatedTrustDomain", "worker count": 1} 2023-09-05T13:34:13Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:34:13Z INFO Starting workers {"controller": "pod", "controllerGroup": "", "controllerKind": "Pod", "worker count": 1} 2023-09-05T13:34:23Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:34:23Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:34:33Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:34:33Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:34:43Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:34:43Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:34:53Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:34:53Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:35:03Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:35:03Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:35:13Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:35:13Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:35:23Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:35:23Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:35:33Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:35:33Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:35:43Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:35:43Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:35:53Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:35:53Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:36:03Z ERROR controller-runtime.source.EventHandler if kind is a CRD, it should be installed before calling Start {"kind": "ClusterStaticEntry.spire.spiffe.io", "error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:63 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext.func2 /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:73 k8s.io/apimachinery/pkg/util/wait.loopConditionUntilContext /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/loop.go:74 k8s.io/apimachinery/pkg/util/wait.PollUntilContextCancel /go/pkg/mod/k8s.io/[email protected]/pkg/util/wait/poll.go:33 sigs.k8s.io/controller-runtime/pkg/internal/source.(*Kind).Start.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/source/kind.go:56 2023-09-05T13:36:03Z ERROR entry-reconciler Failed to list ClusterStaticEntries {"error": "no matches for kind \"ClusterStaticEntry\" in version \"spire.spiffe.io/v1alpha1\""} github.com/spiffe/spire-controller-manager/pkg/spireentry.(*entryReconciler).reconcile /workspace/pkg/spireentry/reconciler.go:101 github.com/spiffe/spire-controller-manager/pkg/reconciler.(*reconciler).Run /workspace/pkg/reconciler/reconciler.go:84 sigs.k8s.io/controller-runtime/pkg/manager.RunnableFunc.Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:383 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:36:13Z ERROR Could not wait for Cache to sync {"controller": "clusterstaticentry", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterStaticEntry", "error": "failed to wait for clusterstaticentry caches to sync: timed out waiting for cache to be synced for Kind *v1alpha1.ClusterStaticEntry"} sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:202 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:207 sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:233 sigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/runnable_group.go:219 2023-09-05T13:36:13Z INFO Stopping and waiting for non leader election runnables 2023-09-05T13:36:13Z INFO shutting down server {"path": "/metrics", "kind": "metrics", "addr": "127.0.0.1:8082"} 2023-09-05T13:36:13Z INFO Stopping and waiting for leader election runnables 2023-09-05T13:36:13Z INFO entry-reconciler Reconciliation canceled 2023-09-05T13:36:13Z INFO federation relationship-reconciler Reconciliation canceled 2023-09-05T13:36:13Z INFO Shutdown signal received, waiting for all workers to finish {"controller": "pod", "controllerGroup": "", "controllerKind": "Pod"} 2023-09-05T13:36:13Z ERROR error received after stop sequence was engaged {"error": "context canceled"} sigs.k8s.io/controller-runtime/pkg/manager.(*controllerManager).engageStopProcedure.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/internal.go:555 2023-09-05T13:36:13Z ERROR error received after stop sequence was engaged {"error": "context canceled"} sigs.k8s.io/controller-runtime/pkg/manager.(*controllerManager).engageStopProcedure.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/internal.go:555 2023-09-05T13:36:13Z INFO Shutdown signal received, waiting for all workers to finish {"controller": "clusterspiffeid", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterSPIFFEID"} 2023-09-05T13:36:13Z INFO All workers finished {"controller": "clusterspiffeid", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterSPIFFEID"} 2023-09-05T13:36:13Z INFO All workers finished {"controller": "pod", "controllerGroup": "", "controllerKind": "Pod"} 2023-09-05T13:36:13Z INFO Shutdown signal received, waiting for all workers to finish {"controller": "clusterfederatedtrustdomain", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterFederatedTrustDomain"} 2023-09-05T13:36:13Z INFO All workers finished {"controller": "clusterfederatedtrustdomain", "controllerGroup": "spire.spiffe.io", "controllerKind": "ClusterFederatedTrustDomain"} 2023-09-05T13:36:13Z INFO Stopping and waiting for caches 2023-09-05T13:36:13Z ERROR error received after stop sequence was engaged {"error": "context canceled"} sigs.k8s.io/controller-runtime/pkg/manager.(*controllerManager).engageStopProcedure.func1 /go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/internal.go:555 2023-09-05T13:36:13Z INFO Stopping and waiting for webhooks 2023-09-05T13:36:13Z INFO controller-runtime.webhook Shutting down webhook server with timeout of 1 minute 2023-09-05T13:36:13Z INFO Wait completed, proceeding to shutdown the manager 2023-09-05T13:36:13Z ERROR setup problem running manager {"error": "failed to wait for clusterstaticentry caches to sync: timed out waiting for cache to be synced for Kind *v1alpha1.ClusterStaticEntry"} main.run /workspace/main.go:347 main.main /workspace/main.go:82 runtime.main /usr/local/go/src/runtime/proc.go:250 2023-09-05T13:36:13Z ERROR error received after stop sequence was engaged {"error": "leader election lost"} sigs.k8s.io/controller-runtime/pkg/manager.(*controllerManager).engageStopProcedure.func1
My Setup:
- Kubernetes running on docker desktop.
- Cluster Name: docker-desktop
% istioctl version
client version: 1.18.2
control plane version: 1.18.2
data plane version: 1.18.2 (1 proxies)
% kubectl version WARNING: This version information is deprecated and will be replaced with the output from kubectl version --short. Use --output=yaml|json to get the full version. Client Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.2", GitCommit:"5835544ca568b757a8ecae5c153f317e5736700e", GitTreeState:"clean", BuildDate:"2022-09-21T14:33:49Z", GoVersion:"go1.19.1", Compiler:"gc", Platform:"darwin/arm64"} Kustomize Version: v4.5.7 Server Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.2", GitCommit:"5835544ca568b757a8ecae5c153f317e5736700e", GitTreeState:"clean", BuildDate:"2022-09-21T14:27:13Z", GoVersion:"go1.19.1", Compiler:"gc", Platform:"linux/arm64"}
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent