Vault Kubernetes Authentication

This kind of error can be caused by a recent change to Service Account Issuer Discovery in Kubernetes 1.21.

In order to mitigate this issue, there are a couple of options that you can choose from based on your expectations:

  1. Manually create a service account, secret and mount it in the pod as mentioned on this github post.
  2. Disable issuer validation as mentioned on another github post.
  3. Downgrade the cluster to version 1.20.

There are also a couple of external blog articles about this on banzaicloud.com and particule.io.