Service Accounts are being created with secrets, however upon pod creation it looks like the token and ca cert are not copied into the pod.
Logs show: [2016-12-27 16:16:29,012][WARN ][io.fabric8.elasticsearch.discovery.k8s. K8sUnicastHostsProvider] [James Dr. Power] Exception caught during discovery javax.ws.rs.WebApplicationException : HTTP 401 Unauthorized Environment variables of the pod include: KUBERNETES_CA_CERTIFICATE_FILE=/var/run/secrets/kubernetes.io/serviceaccount /ca.crt However, the directory /var/run is empty es-master-gqq7m:/var/run# pwd /var/run es-master-gqq7m:/var/run# ls -la total 0 drwxr-xr-x 2 root root 6 Jun 12 2015 . drwxr-xr-x 9 root root 81 Jun 12 2015 .. The definition of the replication controller is here <https://github.com/kubernetes/kubernetes/blob/master/examples/elasticsearch/production_cluster/es-master-rc.yaml>, and includes: env: - name: KUBERNETES_CA_CERTIFICATE_FILE value: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt Any ideas? Thanks! -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
