Skip to content
Latchkey
Kubernetes

kubectl, Helm, and image-pull errors - explained.

Debug Kubernetes in CI/CD: kubectl apply errors, image pull failures, RBAC and auth problems, Helm chart issues, and pod scheduling failures. Root causes and fixes.

Deploy & apply

kubectl apply, manifests, and validation.

"admission webhook denied the request"Fix kubectl "admission webhook denied the request" on apply in CI - a validating webhook (OPA/Gatekeeper, Kyv… "apply -k" behaves unlike kustomize buildFix cases where kubectl apply -k and standalone kustomize build differ in CI - the two use different kustomiz… "resource/name form" errorFix kubectl "error: arguments in resource/name form must have a single resource and name" in CI - a malformed… "certificate signed by unknown authority"Fix kubectl "x509: certificate signed by unknown authority" in CI - kubeconfig is missing the cluster CA, a s… "localhost:8080 was refused"Fix kubectl "The connection to the server localhost:8080 was refused" in CI - no kubeconfig is loaded, so kub… "context deadline exceeded"Fix kubectl "Unable to connect to the server: context deadline exceeded" in CI - an unreachable API server, s… "context deadline exceeded"Fix kubectl "context deadline exceeded" during rollout status or wait in CI - the command timed out before th… "context was not found"Fix kubectl "error: context ... was not found" and missing kubeconfig in CI - the context name is wrong, KUBE… "couldn't get ... API group list"Fix kubectl "E0000 ... couldn't get current server API group list: ... connection refused" in CI - a transien… "immutable" ConfigMap/SecretFix kubectl "data: Forbidden: field is immutable" when updating a ConfigMap or Secret in CI - an object creat… "exceeded its progress deadline"Fix kubectl rollout "error: deployment \"api\" exceeded its progress deadline" in CI - new pods did not becom… "lookup ... no such host"Fix kubectl "Unable to connect to the server: dial tcp: lookup <host>: no such host" in CI - the API server h… "error converting YAML to JSON"Fix kubectl "error converting YAML to JSON" on apply in CI - malformed YAML (tabs, bad indentation, unquoted… "AlreadyExists"Fix kubectl "Error from server (AlreadyExists)" in CI - using create on an object that already exists. Use ap… "Operation cannot be fulfilled ... apply your changes to the latest version"Fix kubectl "Error from server (Conflict): Operation cannot be fulfilled on ...: the object has been modified… "Error from server (Forbidden)"Fix kubectl "Error from server (Forbidden)" during a CI deploy - the authenticated identity lacks RBAC permis… "namespaces ... not found"Fix kubectl "namespaces \"x\" not found" when applying into a namespace that does not exist yet in CI - creat… "NotFound: namespaces ... not found"Fix kubectl "Error from server (NotFound): namespaces \"prod\" not found" in CI - you deployed into a namespa… "Error from server (NotFound)"Fix kubectl "Error from server (NotFound): <resource> not found" in CI - a get/delete/patch against an object… "Error from server (NotFound)"Fix kubectl "Error from server (NotFound)" in CI - a resource or namespace referenced by the command does not… "error parsing ... yaml"Fix kubectl "error parsing ... yaml" in CI - a manifest is not valid YAML (bad indentation, tabs, or a templa… "error converting YAML to JSON"Fix kubectl "error: error parsing manifest.yaml: error converting YAML to JSON: yaml: line N" in CI - the man… "error parsing STDIN"Fix kubectl "error: error parsing STDIN: error converting YAML to JSON: yaml: line N" in CI - malformed YAML… "ValidationError ... unknown field"Fix kubectl "error validating data: ValidationError(...): unknown field" in CI - the manifest has a field the… "error validating data: ValidationError"Fix kubectl "error validating data: ValidationError" in CI - a manifest has an unknown or wrongly-typed field… "error validating data"Fix kubectl "error validating data: ValidationError" on apply in CI - an unknown field, wrong type, or typo i… "no objects passed to apply"Fix kubectl "error: no objects passed to apply" when piping to `apply -f -` in CI - an empty render, a commen… "the path ... does not exist"Fix kubectl "error: the path \"x\" does not exist" on apply in CI - a `-f` file or directory that is not wher… "exec format error"Fix kubectl "exec plugin: invalid apiVersion" / "exec format error" in CI - a credential exec plugin (aws-iam… "field is immutable"Fix kubectl "field is immutable" on apply in CI - changing a Deployment selector, Job template, PVC spec, or… "updates to statefulset spec ... forbidden"Fix kubectl "Forbidden: updates to statefulset spec for fields other than ... are forbidden" in CI - editing… "mapping values are not allowed"Fix kubectl YAML "mapping values are not allowed in this context" in CI - a stray colon, wrong indentation, o… "metadata.labels: Invalid value"Fix kubectl "metadata.labels: Invalid value" / "metadata.annotations" errors in CI - a label value with illeg… "namespaces not found"Fix kubectl "Error from server (NotFound): namespaces ... not found" in CI - applying into a namespace that d… "TLS handshake timeout"Fix kubectl "Unable to connect to the server: net/http: TLS handshake timeout" in CI - a reachable but slow/o… "no matches for kind ... in version"Fix kubectl "no matches for kind \"Ingress\" in version \"extensions/v1beta1\"" in CI - the apiVersion was re… "no matches for kind ... in version"Fix kubectl "no matches for kind ... in version" in CI - a manifest uses an apiVersion the cluster does not s… "object has been modified"Fix kubectl "Error from server (Conflict): Operation cannot be fulfilled ... the object has been modified" in… "progress deadline exceeded"Fix Deployment "progress deadline exceeded" and kubectl rollout status timeouts in CI - pods that never becom… "could not find the requested resource"Fix kubectl "Error from server (NotFound): the server could not find the requested resource" in CI - a remove… "the server could not find the requested resource"Fix kubectl "error: the server could not find the requested resource" in CI - the API server does not serve t… "the server doesn't have a resource type"Fix kubectl "the server doesn't have a resource type" in CI - the custom resource's CRD is not installed, or… "doesn't have a resource type"Fix kubectl "the server doesn't have a resource type" in CI - a missing CRD, a typo in the resource name, or… "dial tcp ... i/o timeout"Fix kubectl "Unable to connect to the server: dial tcp ...: i/o timeout" in CI - the runner cannot reach the… "Unable to connect to the server: dial tcp"Fix kubectl "Unable to connect to the server: dial tcp" in CI - the kubeconfig points at an unreachable API s… "unable to recognize ... no matches for kind"Fix kubectl "unable to recognize ...: no matches for kind \"Certificate\" in version ..." in CI - you applied… "unable to recognize"Fix kubectl "unable to recognize ...: no matches for kind" in CI - a CRD not installed, a removed API version… "certificate has expired"Fix kubectl "x509: certificate has expired or is not yet valid" in CI - an expired client cert or cluster CA,… "You must be logged in to the server (Unauthorized)"Fix kubectl "You must be logged in to the server (Unauthorized)" in CI - the API server rejected the credenti… --server-side manager conflictFix kubectl apply --server-side conflicts caused by an inconsistent --field-manager name in CI - switching fr… apply field conflictFix kubectl "Apply failed with N conflicts: conflicts with ..." in CI - server-side apply field ownership cla… "no objects passed to apply"Fix kubectl "error: no objects passed to apply" in CI - an empty manifest, a glob matching nothing, or a file… "field is immutable"Fix kubectl apply "The Deployment ... is invalid: spec.selector: Invalid value: ... field is immutable" in CI… "metadata.annotations: Too long: ... 262144 bytes"Fix kubectl apply "metadata.annotations: Too long: must have at most 262144 bytes" in CI - the last-applied-c… "annotations: Too long"Fix kubectl "metadata.annotations: Too long: must have at most 262144 bytes" in CI - the last-applied-configu… "cannot delete DaemonSet-managed Pods"Fix kubectl drain refusing with "cannot delete DaemonSet-managed Pods" / "pods with local storage" in CI - pa… "would violate the disruption budget"Fix kubectl drain "Cannot evict pod as it would violate the pod's disruption budget" in CI - a PodDisruptionB… drain "would violate ... disruption budget"Fix kubectl drain "Cannot evict pod as it would violate the pod's disruption budget" in CI - a PodDisruptionB… "no matches for Id"Fix kubectl/kustomize "no matches for Id ...; failed to find unique target for patch" in CI - a patch or name… "timed out waiting for the condition"Fix kubectl "error: timed out waiting for the condition" from rollout status or wait in CI - the --timeout el… "timed out waiting for the condition"Fix kubectl wait "error: timed out waiting for the condition on <resource>" in CI - a condition (Ready/Availa… "Insufficient cpu/memory"Fix Kubernetes "0/N nodes are available: Insufficient cpu/memory" FailedScheduling in CI - pod resource reque… "AttachVolume.Attach failed"Fix Kubernetes "AttachVolume.Attach failed for volume ... rpc error" from a CSI driver in CI - IAM/permission… "Back-off restarting failed container"Fix the Kubernetes event "Back-off restarting failed container" in CI - the kubelet event behind CrashLoopBac… "Back-off restarting failed container"Fix the "Back-off restarting failed container" event in CI - the kubelet is rate-limiting restarts of a conta… "runAsNonRoot ... will run as root"Fix Kubernetes "container has runAsNonRoot and image will run as root" CreateContainerConfigError in CI - a s… "CrashLoopBackOff"Fix Kubernetes "CrashLoopBackOff" in CI deploys - a container that starts then exits repeatedly because of a… "CrashLoopBackOff"Fix "CrashLoopBackOff" after a deploy in CI - the container starts, exits, and Kubernetes keeps restarting it… "CreateContainerConfigError"Fix Kubernetes "CreateContainerConfigError" in CI - a pod that cannot start because a referenced ConfigMap, S… "CreateContainerConfigError"Fix Kubernetes "CreateContainerConfigError" in CI -- the kubelet cannot build the container config because a… "CreateContainerConfigError"Fix "CreateContainerConfigError" in CI - the kubelet cannot build the container config, almost always a missi… "CreateContainerError"Fix Kubernetes "CreateContainerError" in CI - the runtime failed to create the container, usually a bad comma… "CreateContainerError"Fix "CreateContainerError" in CI - the kubelet failed to create the container, often a bad command, a name co… "does not have minimum availability"Fix Kubernetes Deployment "MinimumReplicasUnavailable: Deployment does not have minimum availability" in CI -… "exceeded its progress deadline"Fix "error: deployment exceeded its progress deadline" in CI - the rollout did not make progress within progr… "Failed to create pod sandbox"Fix Kubernetes "FailedCreatePodSandBox: ... failed to set up sandbox ... CNI" in CI - a pod stuck in Containe… "Multi-Attach error for volume"Fix Kubernetes "FailedAttachVolume: Multi-Attach error for volume ... already exclusively attached to one nod… "Unable to attach or mount volumes"Fix "Unable to attach or mount volumes" / FailedMount in CI - the kubelet timed out waiting to attach or moun… "node(s) had untolerated taint"Fix "FailedScheduling: 0/N nodes available" caused by node taints in CI - the pod has no toleration for the t… "Insufficient cpu/memory"Fix Kubernetes "0/N nodes are available: Insufficient cpu" (or memory) in CI -- the scheduler cannot place th… "exceeded quota"Fix Kubernetes "is forbidden: exceeded quota" in CI - a namespace ResourceQuota that blocks creating pods bec… "violates LimitRange"Fix Kubernetes LimitRange admission errors in CI - a pod whose requests/limits fall outside the namespace Lim… "Init:Error" / "Init:CrashLoopBackOff"Fix Kubernetes pods stuck in "Init:Error" or "Init:CrashLoopBackOff" in CI - an init container that fails or… "Init:Error"Fix Kubernetes "Init:Error" or "Init:CrashLoopBackOff" in CI -- an init container exited non-zero, so the mai… "Insufficient ephemeral-storage"Fix Kubernetes "0/N nodes are available: N Insufficient ephemeral-storage" FailedScheduling in CI - a pod who… "deployments.apps not found"Fix "error: deployments.apps \"<name>\" not found" from kubectl rollout in CI - the named Deployment does not… "timed out waiting for the condition"Fix "error: timed out waiting for the condition" from kubectl wait in CI - the resource never reached the con… "Liveness probe failed"Fix Kubernetes "Liveness probe failed" in CI - a failing liveness probe that keeps killing and restarting a c… "Liveness probe failed"Fix "Liveness probe failed" in CI - the kubelet keeps restarting a container because its liveness probe does… "MountVolume.SetUp failed"Fix Kubernetes "FailedMount: MountVolume.SetUp failed" in CI - a Secret/ConfigMap mount whose source is missi… "no PriorityClass with name"Fix Kubernetes pod creation rejected with "no PriorityClass with name X was found" in CI - a priorityClassNam… "didn't match node selector"Fix Kubernetes "FailedScheduling: node(s) didn't match Pod's node affinity/selector" in CI - a nodeSelector o… "node(s) had taint"Fix Kubernetes "0/N nodes are available: N node(s) had untolerated taint" FailedScheduling in CI - pods that… "volume node affinity conflict"Fix Kubernetes "0/N nodes are available: N node(s) had volume node affinity conflict" FailedScheduling in CI… "OOMKilled"Fix "OOMKilled" (exit code 137) in CI - the container exceeded its memory limit and the kernel OOM killer ter… "PVC is not bound"Fix Kubernetes "pod has unbound immediate PersistentVolumeClaims" / PVC stuck Pending in CI - no matching PV,… "PostStartHookError"Fix Kubernetes "PostStartHookError" / "FailedPostStartHook" in CI - a container lifecycle postStart exec or H… "PVC not bound"Fix a Kubernetes PersistentVolumeClaim stuck Pending / "pod has unbound immediate PersistentVolumeClaims" in… "Read-only file system"Fix Kubernetes containers crashing with "Read-only file system" when securityContext.readOnlyRootFilesystem i… "Readiness probe failed"Fix Kubernetes "Readiness probe failed" in CI - pods that run but never become Ready because the probe path,… "Readiness probe failed"Fix "Readiness probe failed" in CI - the pod is running but not added to Service endpoints because its readin… "RunContainerError"Fix Kubernetes "RunContainerError" in CI - the container was created but the runtime failed to start it, ofte… "RunContainerError"Fix "RunContainerError" in CI - the container was created but failed to start running, usually a bad command,… "RuntimeClass not found"Fix Kubernetes pods failing with "RuntimeClass ... not found" or no node supporting the handler in CI - a run… "Startup probe failed"Fix Kubernetes "Startup probe failed" in CI - a startup probe whose failureThreshold × periodSeconds is too s… topology spread unsatisfiableFix Kubernetes "didn't match pod topology spread constraints" FailedScheduling in CI - DoNotSchedule with max… "Unable to attach or mount volumes"Fix Kubernetes "Unable to attach or mount volumes: timed out waiting for the condition" in CI - a volume atta… "violates PodSecurity"Fix Kubernetes "violates PodSecurity \"restricted:latest\"" admission errors in CI - a pod missing securityCo… CrashLoop exit codesDecode Kubernetes container exit codes behind CrashLoopBackOff in CI - 0, 1, 126, 127, 139 (SIGSEGV), 143 (SI… conversion webhook failedFix Kubernetes "conversion webhook for ... failed" errors in CI - a CRD with a conversion webhook whose servi… CronJob "missed schedule"Fix Kubernetes CronJob "Cannot determine if job needs to be started: too many missed start times" / FailedNee… CronJob overlap / skipFix Kubernetes CronJobs that pile up overlapping runs or unexpectedly skip - set concurrencyPolicy (Allow/For… DaemonSet not on all nodesFix a Kubernetes DaemonSet not scheduling on every node in CI - DESIRED lower than node count or pods Pending… "exceeded its progress deadline"Fix Kubernetes "deployment exceeded its progress deadline" in CI - the rollout did not become available in ti… DNS "no servers could be reached"Fix Kubernetes in-cluster DNS failures in CI - "Temporary failure in name resolution" / SERVFAIL for Service… OPA/Gatekeeper deniedFix OPA Gatekeeper "denied by <constraint>" / Kyverno policy violations in CI - a manifest that breaks a clus… HPA "failed to get scale"Fix Kubernetes HPA "failed to get scale subresource" / "FailedGetScale" in CI - a scaleTargetRef pointing at… HPA "unable to fetch metrics"Fix Kubernetes HorizontalPodAutoscaler "unable to fetch metrics from resource metrics API" / targets <unknown… ImagePullBackOff / ErrImagePull (rollout)Fix Kubernetes ImagePullBackOff / ErrImagePull during a CI rollout - new pods cannot pull the image because o… Ingress 503 "no healthy upstream"Fix Kubernetes Ingress returning 503 "no healthy upstream" in CI - the backing Service has no ready endpoints… Ingress annotation errorFix Kubernetes Ingress annotation errors in CI - a wrong annotation prefix, an invalid value, or a rewrite/pa… Ingress "class not found"Fix a Kubernetes Ingress with no ADDRESS in CI - a missing or wrong ingressClassName, or no IngressClass at a… initContainer never completesFix a Kubernetes pod stuck in Init because an initContainer never exits 0 - init containers run sequentially… "Job ... DeadlineExceeded"Fix Kubernetes Job "BackoffLimitExceeded" / "DeadlineExceeded" in CI - a Job that exceeded its activeDeadline… Job "DeadlineExceeded"Fix a Kubernetes Job terminated with "DeadlineExceeded" because activeDeadlineSeconds elapsed before completi… namespace stuck "Terminating"Fix a Kubernetes namespace stuck in "Terminating" in CI - a namespace finalizer waiting on an unavailable API… NetworkPolicy denialFix Kubernetes connections "timing out" between pods in CI - a NetworkPolicy that, once applied, default-deni… PDB "expected ... got 0"Fix Kubernetes PodDisruptionBudget "NoPods" / "ALLOWED DISRUPTIONS 0" in CI - a PDB whose selector matches no… "Evicted: low on resource"Fix Kubernetes pods "Evicted: The node was low on resource: ephemeral-storage/memory" in CI - node-pressure e… "OOMKilled" (137)Fix Kubernetes pods OOMKilled with exit code 137 in CI - a container that exceeded its memory limit and was k… emptyDir sizeLimit exceededFix Kubernetes pods evicted with "exceeds the local ephemeral storage limit" / emptyDir sizeLimit in CI - a s… grace period too shortFix Kubernetes pods killed mid-shutdown because terminationGracePeriodSeconds is too short - the container ge… pod stuck "Terminating"Fix a Kubernetes pod stuck in "Terminating" in CI - a finalizer that never clears, a process ignoring SIGTERM… stuck "ContainerCreating"Diagnose a Kubernetes pod stuck in "ContainerCreating" in CI - a holding status whose true cause (volume moun… "ContainerCreating"Fix a pod stuck in "ContainerCreating" in CI - the pod is scheduled but the kubelet cannot finish setup, usua… "Insufficient cpu/memory"Fix a pod stuck in Pending with "Insufficient cpu/memory" in CI - no node has enough allocatable resources to… PDB maxUnavailable too strictFix a Kubernetes rollout or drain blocked by a PodDisruptionBudget with maxUnavailable: 0 (or too low) - no v… projected token mount failedFix Kubernetes "failed to fetch token" / projected serviceAccountToken volume mount failures in CI - a missin… stuck on finalizerFix a Kubernetes resource stuck in Terminating because a finalizer never clears in CI - the controller that o… Service "no endpoints"Fix a Kubernetes Service with no endpoints in CI - traffic and "connection refused" because the Service selec… StatefulSet ordering stuckFix a Kubernetes StatefulSet rollout that stalls because ordered pod management blocks on an unready ordinal… "accumulating resources" failureFix kustomize "accumulating resources from 'x': evalsymlink failure" / "must build at directory" in CI - a mi… "accumulating resources ... no such file"Fix kustomize "accumulating resources ... no such file or directory" in CI - a resources entry points at a fi… "found conflict between ..."Fix kustomize "may not add resource with an already registered id" / "found conflict" in CI - two resources w… "apiVersion ... not found" (kustomization)Fix kustomize errors from a bad kustomization apiVersion or kind in CI - the header must be kustomize.config.… "unknown field" (kustomization)Fix kustomize "json: unknown field \"x\"" / "invalid Kustomization" in CI - a misspelled or deprecated field… "must specify --enable-helm"Fix kustomize "must specify --enable-helm" in CI - a kustomization uses the helmCharts field, which requires… "no matches for Id ... " (patch target)Fix kustomize "no matches for Id ..." in CI - a patch or transformer targets a resource by name/kind that doe… "no matches for Id"Fix kustomize / kubectl kustomize "no matches for Id ..." in CI - a patch, replacement, or nameReference whos… "patchesStrategicMerge ... deprecated"Fix kustomize warnings/errors about deprecated patchesStrategicMerge and patchesJson6902 in CI - migrate both… "file is not in or below"Fix kustomize "security; file 'x' is not in or below 'y'" in CI - a resource or patch path that escapes the k… "security; file is not in or below"Fix kustomize "security; file \"...\" is not in or below" in CI - load restrictions block referencing a file… "trouble configuring builtin ... plugin"Fix kustomize "trouble configuring builtin ... plugin" in CI - a builtin transformer or generator config has… "unable to find one of 'kustomization.yaml'"Fix kustomize "unable to find one of kustomization.yaml" in CI - the target directory has no kustomization fi… overlay drops a base resourceFix kustomize where a base resource does not appear in the overlay output in CI - the overlay did not include… "evalsymlink failure"Fix kustomize "evalsymlink failure" in CI - kustomize could not resolve a path because it does not exist or a… configMapGenerator hash keeps changingFix kustomize configMapGenerator hash-suffix churn in CI - the appended content hash changes across runs, bre… "config version out of date, run skaffold fix"Fix Skaffold "config version out of date: run `skaffold fix`" in CI - the skaffold.yaml schema predates the i… "context ... does not exist"Fix Skaffold "context X does not exist" in CI - the kube-context named in skaffold.yaml or --kube-context is… "deploy failed" (kubectl apply)Fix Skaffold "deploy failed: kubectl apply: exit status 1" in CI - the rendered manifests were rejected by th… "could not stabilize within"Fix Skaffold "deployment X failed: could not stabilize within" in CI - the status check timed out waiting for… "skaffold dev" never exitsFix a CI job that hangs on `skaffold dev` - dev is a watch-and-redeploy loop that never returns, so it eventu… "helm ... failed"Fix Skaffold "deploying helm: install/upgrade failed" in CI - the Helm deployer could not install or upgrade… "kustomize build ... failed"Fix Skaffold "rendering manifests: kustomize build failed" in CI - the kustomize deployer could not render th… "profile ... not found"Fix Skaffold "profile selection failed: profile X not found" in CI - the profile name passed with -p/--profil… "skaffold config file skaffold.yaml not found"Fix Skaffold "skaffold config file skaffold.yaml not found" in CI - Skaffold ran in a directory without a con… "unable to connect to the server"Fix Skaffold "deploy failed: ... unable to connect to the server" in CI - the runner has no valid KUBECONFIG,… "unknown apiVersion"Fix Skaffold "parsing skaffold config: unknown apiVersion" in CI - the apiVersion in skaffold.yaml is newer o… "unknown field" in configFix Skaffold "error parsing skaffold configuration file: unknown field" in CI - a key in skaffold.yaml is mis… deploy rebuilds or uses wrong tagFix a split Skaffold pipeline where deploy uses the wrong image - the build step must write --file-output and… run vs build vs render (nothing deploys)Fix a Skaffold CI job that builds but never deploys - `skaffold build` only builds and pushes; you need `run`… "bound to Workspaces ... which are not present"Fix Tekton "TaskRun X bound to Workspaces which are not present in declarations" in CI - a workspace binding… "couldn't retrieve Pipeline ... not found"Fix Tekton "couldn't retrieve Pipeline X: pipelines.tekton.dev not found" in CI - the PipelineRun references… "couldn't retrieve Task ... not found"Fix Tekton "couldn't retrieve Task X: tasks.tekton.dev not found" in CI - the TaskRun or Pipeline references… "CreateContainerConfigError"Fix Tekton "CreateContainerConfigError" in CI - the step pod cannot start because a referenced ConfigMap or S… "failed to get ... serviceaccount"Fix Tekton "failed to get ServiceAccount X" in CI - the run names a ServiceAccount that does not exist in its… "invalid input params ... missing values"Fix Tekton "invalid input params for task X: missing values for these params" in CI - the run did not supply… "no matches for kind Task in version tekton.dev/v1"Fix "no matches for kind Task in version tekton.dev/v1" in CI - the Tekton CRDs are not installed, or the man… "persistentvolumeclaim ... not found"Fix Tekton "persistentvolumeclaim X not found" in CI - a workspace binds a PVC that does not exist, or the vo… "Pipeline ... can't be Run; it has an invalid spec"Fix Tekton "Pipeline X can't be Run; it has an invalid spec" in CI - the Pipeline definition fails validation… "resolution ... timed out"Fix Tekton "resolution timed out" in CI - a git or bundle resolver did not return within the timeout because… "Results ... not found"Fix Tekton "Results X not found" in CI - a task references a result that a previous task did not emit, so the… "secret ... not found"Fix Tekton "secret X not found" in CI - a run, ServiceAccount, or step references a Secret that does not exis… "Task ... failed validation"Fix Tekton "Task X failed validation" in CI - the Task spec is structurally invalid, so the TaskRun is reject… "TaskRun ... failed to create pod"Fix Tekton "TaskRun X failed to create pod for taskrun" in CI - the controller could not create the execution… "tkn pr logs ... not found"Fix "tkn pipelinerun logs X not found" in CI - the tkn CLI cannot find the PipelineRun because of the wrong n… "workspace ... not provided"Fix Tekton "workspaces.X not provided" in CI - the Task or Pipeline declares a required workspace the run did… "failed to create ... TriggerBinding"Fix a Tekton EventListener failing to resolve a TriggerBinding in CI - the referenced binding or template is… git clone "authentication required"Fix a Tekton git-clone step failing with "authentication required" in CI - the ServiceAccount has no git-cred… resolver "failed to resolve"Fix Tekton git or bundle resolver "failed to get ... failed to resolve" in CI - the resolver could not fetch… interceptor "failed to parse"Fix a Tekton interceptor failing to parse the webhook body in CI - the payload is not valid JSON, or a CEL ex… "param ... type mismatch (array vs string)"Fix Tekton "invalid parameter type" (array vs string) in CI - a param is declared one type but passed or used… registry push "unauthorized"Fix a Tekton image push failing with "unauthorized" in CI - the build step has no docker-registry secret link… "step ... exited with 1"Fix a Tekton TaskRun where a step exited with code 1 in CI - the container ran but the script returned a non-… "ImagePullBackOff" for a step imageFix Tekton step ImagePullBackOff / ErrImagePull in CI - the pod cannot pull the step image because the tag is… "OOMKilled" stepFix a Tekton step OOMKilled in CI - the step container exceeded its memory limit and the kernel killed it wit…

Image pulls

ImagePullBackOff, auth, and registries.

exec websocket failedFix transient kubectl exec/attach/port-forward "error dialing backend" and SPDY/WebSocket upgrade failures in… "0/N nodes are available: insufficient cpu/memory"Fix "0/3 nodes are available: 3 Insufficient cpu" (or memory) FailedScheduling in CI - no node has enough all… "admission webhook ... denied the request"Fix "Error from server: admission webhook \"...\" denied the request" in CI - a validating admission webhook… "CrashLoopBackOff"Fix "CrashLoopBackOff" after a deploy in CI - the image pulls and the container starts, but the process exits… "CreateContainerConfigError"Fix "CreateContainerConfigError" after a deploy in CI - the pod scheduled but the kubelet cannot build the co… "ErrImageNeverPull"Fix "ErrImageNeverPull" in CI - the pod uses imagePullPolicy: Never but the image is not already present on t… "ErrImagePull: unauthorized"Fix Kubernetes "ErrImagePull: unauthorized" in CI deploys - pods cannot pull a private image because the imag… "ErrImagePull"Fix Kubernetes "ErrImagePull" on pod start - decode the underlying not-found, unauthorized, or network error… "exec format error"Fix "exec format error" in a pod in CI - the container image was built for a different CPU architecture than… "failed to pull and unpack image"Fix containerd "failed to pull and unpack image ... failed to extract layer" in CI - a corrupt or truncated l… "ImageInspectError"Fix Kubernetes "ImageInspectError" in CI - the container runtime could not inspect an image already present o… "ImagePullBackOff / ErrImagePull"Fix "ImagePullBackOff" and "ErrImagePull" after a deploy in CI - the kubelet cannot pull the container image,… "ImagePullBackOff"Fix Kubernetes "ImagePullBackOff" in CI deploys - a wrong image name or tag, a private registry without crede… "imagePullSecret not found"Fix a missing imagePullSecret in CI - the pod references a pull secret that does not exist in the namespace,… "InvalidImageName"Fix Kubernetes "InvalidImageName" pod errors in CI - a malformed image reference: an unsubstituted variable,… "InvalidImageName"Fix "InvalidImageName" in CI - the image reference in the pod spec is syntactically invalid (bad tag, empty v… "manifest unknown"Fix Kubernetes/registry "manifest unknown" image-pull errors in CI - a tag or digest that does not exist, was… image arch mismatchFix Kubernetes "no match for platform in manifest" and exec format errors in CI - an amd64-only image schedul… "OOMKilled"Fix "OOMKilled" (exit code 137) after a rollout in CI - the container exceeded its memory limit and the kerne… "pull access denied"Fix Kubernetes "pull access denied" / "repository does not exist or may require authentication" in CI - priva… image pull "context canceled"Fix transient Kubernetes image-pull stalls in CI - "context canceled" / pull progress-deadline aborts on larg… "no basic auth credentials" (ECR)Fix Kubernetes pulls from Amazon ECR failing with "no basic auth credentials" in CI - nodes missing IAM permi… GCR/GAR "permission denied"Fix Kubernetes pulls from GCR / Google Artifact Registry failing in CI - the node service account lacks the A… image pull "i/o timeout"Fix transient Kubernetes image-pull "dial tcp ... i/o timeout" to the registry in CI - a node that cannot rea… pull "i/o timeout"Fix transient Kubernetes image-pull network failures in CI - "dial tcp: i/o timeout" and "connection reset by… pull "TLS handshake timeout"Fix Kubernetes image pulls failing with "Get https://...: net/http: TLS handshake timeout" in CI - a slow, co… registry x509 cert errorFix Kubernetes image pulls failing with "x509: certificate signed by unknown authority" in CI - a private reg… "x509: certificate signed by unknown authority"Fix "x509: certificate signed by unknown authority" during image pull in CI - the node does not trust the reg… pull rate limit / timeoutFix transient Kubernetes image-pull failures in CI - Docker Hub "toomanyrequests" rate limits and pull timeou… imagePullSecrets ignoredFix Kubernetes pods ignoring imagePullSecrets in CI - secret in the wrong namespace, wrong .dockerconfigjson,… metrics-server x509 errorFix Kubernetes metrics-server failing with "x509: cannot validate certificate" so kubectl top and HPA work in… "unable to stream build output"Fix Skaffold "build failed: ... unable to stream build output" in CI - the builder process ended unexpectedly… "docker build failed"Fix Skaffold "building [image]: docker build failed" in CI - the Dockerfile build returned non-zero. The real… "getting default repo"Fix Skaffold builds pushing to the wrong registry in CI - without --default-repo, Skaffold uses the image nam… "not found in the artifacts"Fix Skaffold "loading artifacts: image X not found" in CI - a deploy consumed a build file whose images do no… "kaniko: build failed"Fix Skaffold "building [image]: kaniko build failed" in CI - the in-cluster kaniko pod could not build or pus… "no push access to repository"Fix Skaffold "getting push access: ... unauthorized" in CI - the runner is not authenticated to the registry,… "tagging images failed"Fix Skaffold "tagging images: ... failed" in CI - the configured tag policy could not produce a tag, often th… "requires a running docker daemon"Fix Skaffold "the docker build requires a running docker daemon" in CI - the local docker builder has no daem… "no space left on device"Fix Skaffold builds failing with "no space left on device" in CI - the runner disk filled with image layers,… "not a git repository" (gitCommit tag)Fix Skaffold gitCommit tagger "not a git repository" in CI - a shallow or tarball checkout has no .git, so Sk…

RBAC & auth

Permissions, contexts, and credentials.

aws-auth not mappedFix EKS "Unauthorized" / "the server has asked for the client to provide credentials" in CI - an IAM role not… EKS "provide credentials"Fix EKS kubectl "the server has asked for the client to provide credentials" / expired aws-iam token in CI -… Workload Identity deniedFix GKE Workload Identity "PermissionDenied" / "unable to impersonate" in CI - a Kubernetes ServiceAccount no… "permissions not currently held"Fix kubectl "user ... attempting to grant RBAC permissions not currently held" in CI - the RBAC escalation gu… forbidden (cluster-scoped)Fix kubectl Forbidden errors on cluster-scoped resources in CI - namespaces, nodes, CRDs, and ClusterRoles ne… "cannot impersonate"Fix kubectl "Error from server (Forbidden): users ... is forbidden: User cannot impersonate resource" in CI -… "cannot list resource"Fix kubectl "User cannot list resource X in API group Y" in CI - a ServiceAccount missing get/list/watch verb… "Forbidden: cannot create ... in the namespace"Fix kubectl "Error from server (Forbidden): ... cannot create resource ... in the namespace" in CI - the depl… "Error from server (Forbidden)"Fix kubectl "Error from server (Forbidden)" in CI - the authenticated identity has no RBAC permission for the… "Error from server (ServiceUnavailable)"Fix kubectl "Error from server (ServiceUnavailable): the server is currently unable to handle the request" in… "context ... does not exist"Fix kubectl "error: context \"prod\" does not exist" in CI - the kubeconfig has no context by that name, so k… "Unauthorized" (401)Fix kubectl "error: You must be logged in to the server (Unauthorized)" in CI - an expired token, a stale kub… exec credential plugin failedFix kubectl "exec: executable ... not found" / "getting credentials: exec plugin" errors in CI - a missing cl… "secrets not found"Fix kubectl "Error from server (NotFound): secrets ... not found" in CI - a workload referencing a Secret tha… "connection to the server localhost:8080 was refused"Fix kubectl "The connection to the server localhost:8080 was refused - did you specify the right host or port… "connection ... was refused"Fix kubectl "The connection to the server localhost:8080 was refused" in CI - kubectl falling back to the def… "x509: certificate signed by unknown authority"Fix kubectl "x509: certificate signed by unknown authority" in CI - kubectl cannot validate the API server TL… "You must be logged in to the server (Unauthorized)"Fix kubectl "error: You must be logged in to the server (Unauthorized)" in CI - the API server reached but re… "exec plugin ... not found"Fix kubectl "exec: executable aws-iam-authenticator not found" or "gke-gcloud-auth-plugin: executable not fou… "container ... not found"Fix kubectl exec/logs "Error from server (BadRequest): container <name> is not valid for pod" in CI - naming… "unable to upgrade connection"Fix kubectl "unable to upgrade connection: Forbidden" on exec/logs/port-forward in CI - missing pods/exec or… exec plugin apiVersion mismatchFix kubectl "exec plugin: invalid apiVersion client.authentication.k8s.io/v1alpha1" in CI - a kubeconfig exec… "admission webhook denied the request"Fix "Error: admission webhook denied the request" in CI - a validating admission webhook (policy controller)… "cannot create resource ... forbidden"Fix Kubernetes "cannot create resource ... forbidden" for a service account in CI - the deploy service accoun… "operation cannot be fulfilled"Fix "Error from server (Conflict): Operation cannot be fulfilled ... object has been modified" in CI - an opt… "Error from server (Forbidden)"Fix "Error from server (Forbidden): ... cannot ... " in CI - the authenticated identity is missing the RBAC p… "failed calling webhook"Fix "Error: failed calling webhook ... context deadline exceeded" in CI - the API server could not reach the… "field is immutable"Fix "The <resource> is invalid: ... field is immutable" in CI - you changed a field Kubernetes does not allow… "namespaces not found"Fix "Error from server (NotFound): namespaces \"<name>\" not found" in CI - you applied into a namespace that… "resource mapping not found"Fix "error: resource mapping not found for ... ensure CRDs are installed first" in CI - a custom resource was… "asked for the client to provide credentials"Fix "the server has asked for the client to provide credentials" in CI - kubectl authenticated with a token/c… "unable to read certificate-authority"Fix "error: unable to read certificate-authority ... no such file or directory" in CI - the kubeconfig points… "no matches for kind"Fix "unable to recognize ... no matches for kind" in CI - kubectl applied a custom resource whose CRD is not… "x509: certificate signed by unknown authority"Fix "x509: certificate signed by unknown authority" connecting to the API server in CI - kubectl does not tru… "Unauthorized"Fix "error: You must be logged in to the server (Unauthorized)" in CI - the API server returned 401; the cred… aggregated ClusterRole emptyFix a Kubernetes aggregated ClusterRole with no effective permissions in CI - an aggregationRule whose label… RoleBinding → missing RoleFix Kubernetes RBAC where a RoleBinding references a Role/ClusterRole that does not exist - the binding appli… ServiceAccount missing permissionsFix a Kubernetes ServiceAccount missing RBAC permissions in CI - no RoleBinding, wrong ServiceAccount name, o…

Helm

Chart rendering, releases, and upgrades.

--reuse-values stale valuesFix Helm upgrades where --reuse-values silently keeps old values and ignores new chart defaults in CI - use -… helm --wait "timed out"Fix Helm "INSTALL/UPGRADE FAILED: timed out waiting for the condition" with --wait in CI - the release applie… "another operation in progress"Fix Helm "another operation (install/upgrade/rollback) is in progress" in CI - a release stuck pending-* afte… "another operation (install/upgrade/rollback) is in progress"Fix "Error: another operation (install/upgrade/rollback) is in progress" in CI - a prior Helm run was interru… "cannot re-use a name that is still in use"Fix Helm "Error: INSTALLATION FAILED: cannot re-use a name that is still in use" in CI - installing a release… "cannot re-use a name that is still in use"Fix Helm "Error: INSTALLATION FAILED: cannot re-use a name that is still in use" in CI - an install was attem… Helm release in failed stateFix Helm installs blocked by a prior release stuck in a failed/uninstalling state in CI - "Error: INSTALLATIO… "chart requires kubeVersion"Fix Helm "Error: chart requires kubeVersion: >=X which is incompatible with Kubernetes <version>" in CI - a C… "chart requires kubeVersion"Fix Helm "chart requires kubeVersion" errors in CI - the target cluster's Kubernetes version does not satisfy… "chart requires kubeVersion"Fix Helm "Error: chart requires kubeVersion: X which is incompatible with Kubernetes Y" in CI - the cluster v… "context deadline exceeded"Fix Helm "Error: context deadline exceeded" in CI - a request to the API server (or a wait) exceeded its dead… "no repositories found"Fix Helm "Error: no repositories found. You must add one before updating" / "no repositories to show" in CI -… "required" value errorFix Helm "Error: execution error at ... : <message>" raised by the required function in CI - a template deman… helm "required" value missingFix Helm "execution error ... <message>" from the required function in CI - a chart that aborts because a man… "post-install hook failed"Fix "Error: ... failed post-install: ... hook ... failed" in CI - a Helm post-install/post-upgrade hook Job d… "failed to download chart"Fix Helm "failed to download" chart errors in CI - the repo was not added/updated, the version is missing, or… "failed to download" chartFix Helm "Error: failed to download <chart>" in CI - a repo not added or out of date, a wrong chart name/vers… "failed to download"Fix Helm "Error: failed to download "repo/chart"" in CI - Helm could not fetch the chart because the version… "missing in charts/ directory"Fix Helm "found in Chart.yaml, but missing in charts/ directory" / "no cached repo found" in CI - subchart de… "found in Chart.yaml, but missing in charts/ directory"Fix Helm "Error: found in Chart.yaml, but missing in charts/ directory" in CI - a declared dependency was nev… missing chart dependenciesFix Helm "found in Chart.yaml, but missing in charts/ directory" in CI - subchart dependencies declared but n… "has no deployed releases"Fix Helm "Error: UPGRADE FAILED: <release> has no deployed releases" in CI - a release whose only revisions a… "cannot re-use a name that is still in use"Fix Helm "INSTALLATION FAILED: cannot re-use a name that is still in use" in CI - a release with that name al… "INSTALLATION FAILED"Fix Helm "Error: INSTALLATION FAILED" in CI - a name already in use, an existing resource, an invalid manifes… "Kubernetes cluster unreachable"Fix Helm "Kubernetes cluster unreachable" in CI - Helm cannot reach or authenticate to the API server because… "Kubernetes cluster unreachable"Fix Helm "Error: INSTALLATION FAILED: Kubernetes cluster unreachable" in CI - Helm has no working kubeconfig… "not a valid chart repository"Fix Helm "Error: looks like \"<url>\" is not a valid chart repository or cannot be reached" in CI - a wrong r… lookup empty on renderFix Helm charts where the lookup function returns empty during helm template or --dry-run in CI - lookup only… "nil pointer evaluating interface {}"Fix Helm "Error: template: ... nil pointer evaluating interface {}.<field>" in CI - a template walked into a… "no cached repo found"Fix Helm "Error: no cached repo found. (try 'helm repo update')" in CI - Helm has no local index for a reposi… Helm CRD "no matches for kind"Fix Helm "resource mapping not found for ... ensure CRDs are installed first" in CI - a chart using a custom… "no repository definition for"Fix Helm "Error: no repository definition for <url>. Please add the missing repos via 'helm repo add'" in CI… "pre-install hooks failed"Fix Helm "Error: INSTALLATION FAILED: pre-install hooks failed" in CI - a resource annotated as a pre-install… helm "hook ... failed"Fix Helm "INSTALL/UPGRADE FAILED: ... hook ... failed" in CI - a pre-install/pre-upgrade/post-install hook Jo… "query: failed to query with labels"Fix Helm "Error: query: failed to query with labels" in CI - Helm cannot read its release records (Secrets/Co… "query: failed to query with labels"Fix Helm "Error: query: failed to query with labels" in CI - a Helm 3 client cannot read releases stored by H… Helm "--atomic" rollbackFix Helm "UPGRADE FAILED ... has been rolled back" with --atomic in CI - the upgrade failed (timeout or bad r… "resource already exists"Fix Helm "rendered manifests contain a resource that already exists" in CI - a resource not managed by this r… "rendered manifests contain a resource that already exists"Fix Helm "Error: rendered manifests contain a resource that already exists. Unable to continue with install"… "resource that already exists"Fix "Error: rendered manifests contain a resource that already exists ... not managed by Helm" in CI - the ch… "a resource that already exists"Fix Helm "rendered manifests contain a resource that already exists" in CI - the chart targets an object that… "template: parse error"Fix Helm "template: parse error" in CI - a chart template has invalid Go-template syntax, so rendering fails… "timed out waiting for the condition"Fix Helm "Error: ... timed out waiting for the condition" in CI - a --wait/--atomic install or upgrade where… "timed out waiting for the condition"Fix Helm "Error: timed out waiting for the condition" with --wait in CI - Helm waited for resources to become… "timed out waiting for the condition"Fix "Error: ... timed out waiting for the condition" from helm --wait in CI - Helm waited for resources to be… "unable to build kubernetes objects from release manifest"Fix Helm "Error: unable to build kubernetes objects from release manifest" in CI - the rendered YAML is struc… "unable to build kubernetes objects"Fix Helm "Error: unable to build kubernetes objects from release manifest" in CI - rendered output that fails… "field is immutable"Fix Helm "Error: UPGRADE FAILED: cannot patch ... field is immutable" in CI - the chart changed a Kubernetes… "another operation (install/upgrade/rollback) is in progress"Fix Helm "Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress" in CI - the rel… "another operation (install/upgrade) is in progress"Fix Helm "UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress" in CI - a previous Hel… "cannot patch" (immutable)Fix Helm "UPGRADE FAILED: cannot patch <resource> ... field is immutable" in CI - a chart change to an immuta… "has no deployed releases"Fix Helm "Error: UPGRADE FAILED: "X" has no deployed releases" in CI - a release exists but every revision is… "post-upgrade hooks failed"Fix Helm "Error: UPGRADE FAILED: post-upgrade hooks failed" in CI - a hook Job or Pod with a post-upgrade ann… "UPGRADE FAILED"Decode Helm "Error: UPGRADE FAILED" in CI - failed hooks, invalid manifests, immutable fields, and rollout ti… "has no deployed releases"Fix "Error: UPGRADE FAILED: <name> has no deployed releases" in CI - a previous install/upgrade left the rele… "values don't meet the specifications of the schema"Fix Helm values schema validation failures in CI - supplied values violate the chart's values.schema.json, so… "values don't meet the specifications of the schema(s)"Fix "Error: values don't meet the specifications of the schema(s)" in CI - your supplied values.yaml violates… "values don't meet the specifications of the schema(s)"Fix Helm "Error: values don't meet the specifications of the schema(s)" in CI - supplied values violate the c… "wrong type for value"Fix Helm "Error: template: ... wrong type for value; expected ...; got ..." in CI - a template used a value a… "did not find expected key"Fix Helm "Error: YAML parse error on ...: error converting YAML to JSON: did not find expected key" in CI - t… "YAML parse error on ... template"Fix Helm "Error: YAML parse error on <chart>/templates/<file>: ..." in CI - rendered template output that is… helm lint "[ERROR] templates/"Fix "helm lint" failing with "[ERROR] templates/: ..." in CI - lint found a rendering or schema error and exi… "failed to authorize" (OCI)Fix Helm OCI "Error: failed to authorize" / "unauthorized" in CI - pushing or pulling an OCI chart was reject… helm push (OCI) failedFix Helm "helm push" failures to an OCI registry in CI - not logged in, an oci:// reference mistake, or pushi… helm "uninstalling/pending" stuckFix a Helm release stuck in "uninstalling", "pending-install", or "pending-upgrade" in CI - an interrupted He… release stuck pending-*Recover a Helm release stuck in pending-install/pending-upgrade/pending-rollback in CI - clear the dead in-fl… template render errorFix Helm chart template errors in CI - "nil pointer evaluating interface", "function not defined", and bad in… "chart ... not found"Fix helmfile release "chart ... not found" in CI - the chart repository was never added or updated, so helm c… "helmfile: command not found"Fix "helmfile: command not found" in CI - the runner has no helmfile binary on PATH because the step never in… "context deadline exceeded"Fix helmfile "context deadline exceeded" in CI - a helm operation could not reach the cluster or timed out wa… "helm diff exited with status 2"Fix helmfile "helm exited with status 2" from helm-diff in CI - status 2 means the diff detected changes, whi… "environment ... is not defined"Fix helmfile "environment \"X\" is not defined" in CI - the --environment you passed has no matching entry un… "environment values file matching ... not found"Fix helmfile "in ./helmfile.yaml: environment values file matching ... not found" in CI - an environment refe… "failed to read helmfile.yaml"Fix helmfile "failed to read helmfile.yaml" in CI - the YAML is malformed or a Go template in it did not rend… "hook ... failed"Fix helmfile "hook [...] failed" in CI - a lifecycle hook command declared on a release exited non-zero, abor… "no releases found that matches specified selector"Fix helmfile "no releases found that matches specified selector" in CI - a --selector label filter or environ… "no such command ... diff" (helm-diff missing)Fix helmfile failing because the helm-diff plugin is not installed in CI - helmfile apply and diff both requi… "helmfile template" failedFix "helmfile template" failures in CI - helm could not render a release chart because of a missing value, a…
Explore other topics
GitHub ActionsWorkflow, runner, and YAML errors - diagnosed and fixed. Node.js & npmnpm, yarn, and pnpm failures in CI - solved. DockerBuild, run, compose, and registry errors - explained. Pythonpip, poetry, venv, and pytest failures - fixed. Java & JVMMaven, Gradle, and JVM failures in CI - resolved. GoGo build, module, and test failures - diagnosed.