Kubernetes

kubectl, Helm, and image-pull errors - explained.

Debug Kubernetes in CI/CD: kubectl apply errors, image pull failures, RBAC and auth problems, Helm chart issues, and pod scheduling failures. Root causes and fixes.

Deploy & apply

kubectl apply, manifests, and validation.

"admission webhook denied the request"Fix kubectl "admission webhook denied the request" on apply in CI - a validating webhook (OPA/Gatekeeper, "immutable" ConfigMap/SecretFix kubectl "data: Forbidden: field is immutable" when updating a ConfigMap or Secret in CI - an object "dial tcp ... i/o timeout"Fix kubectl "Unable to connect to the server: dial tcp ...: i/o timeout" in CI - the runner cannot reach the "CreateContainerError"Fix Kubernetes "CreateContainerError" in CI - the runtime failed to create the container, usually a bad "Failed to create pod sandbox"Fix Kubernetes "FailedCreatePodSandBox: ... failed to set up sandbox ... "exceeded quota"Fix Kubernetes "is forbidden: exceeded quota" in CI - a namespace ResourceQuota that blocks creating pods "MountVolume.SetUp failed"Fix Kubernetes "FailedMount: MountVolume.SetUp failed" in CI - a Secret/ConfigMap mount whose source is topology spread unsatisfiableFix Kubernetes "didn't match pod topology spread constraints" FailedScheduling in CI - DoNotSchedule with Ingress "class not found"Fix a Kubernetes Ingress with no ADDRESS in CI - a missing or wrong ingressClassName, or no IngressClass at grace period too shortFix Kubernetes pods killed mid-shutdown because terminationGracePeriodSeconds is too short - the container "accumulating resources" failureFix kustomize "accumulating resources from 'x': evalsymlink failure" / "must build at directory" in CI - a

Image pulls

ImagePullBackOff, auth, and registries.

"failed to pull and unpack image"Fix containerd "failed to pull and unpack image ... failed to extract layer" in CI - a corrupt or truncated image pull "context canceled"Fix transient Kubernetes image-pull stalls in CI - "context canceled" / pull progress-deadline aborts on image pull "i/o timeout"Fix transient Kubernetes image-pull "dial tcp ... i/o timeout" to the registry in CI - a node that cannot registry x509 cert errorFix Kubernetes image pulls failing with "x509: certificate signed by unknown authority" in CI - a private

RBAC & auth

Permissions, contexts, and credentials.

forbidden (cluster-scoped)Fix kubectl Forbidden errors on cluster-scoped resources in CI - namespaces, nodes, CRDs, and ClusterRoles "no matches for kind"Fix "unable to recognize ... no matches for kind" in CI - kubectl applied a custom resource whose CRD is not

Helm

Chart rendering, releases, and upgrades.

"no repositories found"Fix Helm "Error: no repositories found. You must add one before updating" / "no repositories to show" in CI - "missing in charts/ directory"Fix Helm "found in Chart.yaml, but missing in charts/ directory" / "no cached repo found" in CI - subchart "Kubernetes cluster unreachable"Fix Helm "Error: INSTALLATION FAILED: Kubernetes cluster unreachable" in CI - Helm has no working kubeconfig lookup empty on renderFix Helm charts where the lookup function returns empty during helm template or --dry-run in CI - lookup only "resource already exists"Fix Helm "rendered manifests contain a resource that already exists" in CI - a resource not managed by this "cannot patch" (immutable)Fix Helm "UPGRADE FAILED: cannot patch <resource> ... field is immutable" in CI - a chart change to an "did not find expected key"Fix Helm "Error: YAML parse error on ...: error converting YAML to JSON: did not find expected key" in CI - "YAML parse error on ... template"Fix Helm "Error: YAML parse error on <chart>/templates/<file>: ..." in CI - rendered template output that is helm push (OCI) failedFix Helm "helm push" failures to an OCI registry in CI - not logged in, an oci:// reference mistake, or release stuck pending-*Recover a Helm release stuck in pending-install/pending-upgrade/pending-rollback in CI - clear the dead "helmfile: command not found"Fix "helmfile: command not found" in CI - the runner has no helmfile binary on PATH because the step never

Explore other topics

GitHub ActionsWorkflow, runner, and YAML errors - diagnosed and fixed. Node.js & npmnpm, yarn, and pnpm failures in CI - solved. DockerBuild, run, compose, and registry errors - explained. Pythonpip, poetry, venv, and pytest failures - fixed. Java & JVMMaven, Gradle, and JVM failures in CI - resolved. GoGo build, module, and test failures - diagnosed.