Vault Kubernetes Authentication
This kind of error can be caused by a recent change to Service Account Issuer Discovery in Kubernetes 1.21.
In order to mitigate this issue, there are a couple of options that you can choose from based on your expectations:
- Manually create a service account, secret and mount it in the pod as mentioned on this github post.
- Disable issuer validation as mentioned on another github post.
- Downgrade the cluster to version 1.20.
There are also a couple of external blog articles about this on banzaicloud.com and particule.io.