• EN
Question

failed to list API resources

  • 27 February 2024
  • 8 comments
  • 97 views
A
Userlevel 3

Hi,
when i tried running the backup, it fails on the first phase with error:
 

 - name: FailedSubPhases

                value:

                  - Err:

                      cause:

                        message: "Failed to list APIResources: unable to retrieve the

                          complete list of server APIs:

                          actions.kio.kasten.io/v1alpha1: Unauthorized,

                          apps.kio.kasten.io/v1alpha1: Unauthorized,

                          servicecatalog.k8s.io/v1beta1: Unauthorized,

                          vault.kio.kasten.io/v1alpha1: Unauthorized"

                      fields: []

                      message: Job failed to be executed

 

please advise

8 comments

Madi.Cristil
Userlevel 7
Badge +7

@jaiganeshjk 

Madi Cristil
FRubens
Userlevel 4
Badge +2

Hello @Ali Kanso 

Thank you for using K10 community!

Please are you performing this operation with a admin user or a basic user ?

Also if you try to check the apis using kubectl with the same user on kubernetes cluster what is the output:

kubectl get apiservices | grep kasten
kubectl api-resources


Rubens

A
Userlevel 3

Hello @FRubens,

i am performing this action using K10-K10 sa created by Kasten during the installation, and this service account uses the same cluster role as the system:admin user.

when i run “kubectl api-resources”, i get the same errors: “Failed to list APIResources...:Unauthorized”

A
Userlevel 3

i think it’s related to the clusterrole, but the clusterrole there is “cluster-admin” with full privileges. 

FRubens
Userlevel 4
Badge +2

 Thanks for the information @Ali Kanso.

Please which k8s cluster are you running K10 is it OCP (Openshift) or other environment ?

A
Userlevel 3

yeah, it’s OCP with version 3.11, Kasten 4.0.2 is installed for migration purpose.

FRubens
Userlevel 4
Badge +2

Thanks.

Please checking on RedHat for OCP 3.11 it might be that metrics-server has some issues if i.e. you have redeployed  certificates, I would recommend following the instructions in the link below, where it is scaling down/up the metrics-server (but would be the same for any other api group) on openshift-metrics-server project, please check the link below and see if it could help in your case:

https://access.redhat.com/solutions/4765881

After that on K10 side, please rollout config.svc and aggregatedapis-svc:

oc rollout restart -n kasten-io deployment/aggregatedapis-svc
oc rollout restart -n kasten-io deployment/config-svc

Let me know the output.

Regards

Rubens

E
Userlevel 3
Badge +1

Hello

 

I would also recommend seeing if you can run even K10 API commands. 

 

kubectl auth can-i get apiservices

and 

kubectl auth can-i get policies

If this says no then you do not have RBAC permissions to access these API’s

 

but so far I would say this is likey the account you are logged in lack’s RBAC permissions to even list api-resources or token is invalid.

 

Thanks

Emmanuel

Comment


Terms & Conditions