Re: Prov of pod template failing with "Service account may have been revoked"

2019-01-22 Thread Carlos Sanchez
User "slc11yke_k8s_user" cannot get pods/log in the namespace "default".

On Tue, Jan 22, 2019, 09:59  wrote:

> Hi ,
> My Jenkins is running on a pod and is configured to K8S.
> when tried to run a  job .. Provision of the pod template failing with
> below error ..
> ===
>
> Waiting for agent to connect (99/100): k8s-pod-vfzmj
>
> Jan 22, 2019 8:30:30 AM WARNING 
> org.csanchez.jenkins.plugins.kubernetes.KubernetesLauncher launch
>
> Error in provisioning; agent=KubernetesSlave name: k8s-pod-vfzmj, 
> template=PodTemplate{inheritFrom='', name='K8S_POD', namespace='default', 
> idleMinutes=3, label='K8S_LAB', nodeSelector='', nodeUsageMode=EXCLUSIVE, 
> workspaceVolume=EmptyDirWorkspaceVolume [memory=false], 
> containers=[ContainerTemplate{name='jnlp', 
> image='oraclelinuxjdk-jenkins-slave:14.0', privileged=true, 
> workingDir='/scratch/syseng', command='', args='', resourceRequestCpu='', 
> resourceRequestMemory='', resourceLimitCpu='', resourceLimitMemory='', 
> livenessProbe=org.csanchez.jenkins.plugins.kubernetes.ContainerLivenessProbe@641217ec}],
>  yaml=}
> io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: 
> GET at: 
> https://10.250.85.114:6443/api/v1/namespaces/default/pods/k8s-pod-vfzmj/log?pretty=false=jnlp=30.
>  Message: Forbidden!Configured service account doesn't have access. Service 
> account may have been revoked. pods "k8s-pod-vfzmj" is forbidden: User 
> "slc11yke_k8s_user" cannot get pods/log in the namespace "default".
>   at 
> io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:478)
>
> ==
> Any help would be great help..
> Regards,
> Basanta
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/19217962-a508-4ede-85d5-e74d5bb7%40googlegroups.com
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CALHFn6M1saDQKz-RqkjrfRZPqhUNA1P7EaihUMZmLxDdiOHMQg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Prov of pod template failing with "Service account may have been revoked"

2019-01-22 Thread pbasanta2002
Hi ,
My Jenkins is running on a pod and is configured to K8S.
when tried to run a  job .. Provision of the pod template failing with 
below error ..
===

Waiting for agent to connect (99/100): k8s-pod-vfzmj

Jan 22, 2019 8:30:30 AM WARNING 
org.csanchez.jenkins.plugins.kubernetes.KubernetesLauncher launch

Error in provisioning; agent=KubernetesSlave name: k8s-pod-vfzmj, 
template=PodTemplate{inheritFrom='', name='K8S_POD', namespace='default', 
idleMinutes=3, label='K8S_LAB', nodeSelector='', nodeUsageMode=EXCLUSIVE, 
workspaceVolume=EmptyDirWorkspaceVolume [memory=false], 
containers=[ContainerTemplate{name='jnlp', 
image='oraclelinuxjdk-jenkins-slave:14.0', privileged=true, 
workingDir='/scratch/syseng', command='', args='', resourceRequestCpu='', 
resourceRequestMemory='', resourceLimitCpu='', resourceLimitMemory='', 
livenessProbe=org.csanchez.jenkins.plugins.kubernetes.ContainerLivenessProbe@641217ec}],
 yaml=}
io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET 
at: 
https://10.250.85.114:6443/api/v1/namespaces/default/pods/k8s-pod-vfzmj/log?pretty=false=jnlp=30.
 Message: Forbidden!Configured service account doesn't have access. Service 
account may have been revoked. pods "k8s-pod-vfzmj" is forbidden: User 
"slc11yke_k8s_user" cannot get pods/log in the namespace "default".
at 
io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:478)

==
Any help would be great help..
Regards,
Basanta

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/19217962-a508-4ede-85d5-e74d5bb7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.