Error map

No resources found No resources found in default namespace

Kubernetes · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (7). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

No resources found — No resources found in default namespace (Kubernetes)No resource…is waiting to start — Error from server (BadRequest): container "x" in pod "y" is waiting to start: ContainerCreating (Kubernetes)is waiting to startkubectl connection refused — kubectl: The connection to the server localhost:8080 was refused — did you specify the right host or port? (Kubernetes)kubectl connection …x509 (kubectl) — Unable to connect to the server: x509: certificate has expired or is not yet valid / certificate signed by unknown authority (Kubernetes)x509 (kubectl)NotFound — Error from server (NotFound): deployments.apps "x" not found (Kubernetes)NotFoundAlreadyExists — Error from server (AlreadyExists): ... already exists (Kubernetes)AlreadyExistsnamespace Terminating — Namespace stuck in Terminating (Kubernetes)namespace Terminati…Forbidden — Error from server (Forbidden): pods is forbidden: User "x" cannot list resource "pods" in API group "" in the namespace (Kubernetes)ForbiddenCrashLoopBackOff — Kubernetes: CrashLoopBackOff (Kubernetes)CrashLoopBackOff500 — HTTP 500 Internal Server Error (HTTP)500499 — HTTP 499 Client Closed Request (Nginx) (HTTP)499ECONNREFUSED — Error: connect ECONNREFUSED 127.0.0.1:5432 (Node.js)ECONNREFUSEDExpiredToken — AWS: ExpiredToken — The security token included in the request is expired (AWS)ExpiredTokenYou must be logged in to the server — error: You must be logged in to the server (Unauthorized) (Kubernetes)You must be logged …CERTIFICATE_VERIFY_FAILED — SSL: CERTIFICATE_VERIFY_FAILED / unable to get local issuer certificate (API)CERTIFICATE_VERIFY_…Unable to connect to the server: dial tcp i/o timeout — Unable to connect to the server: dial tcp <ip>:443: i/o timeout (Kubernetes)Unable to connect t…doesn't have a resource type — error: the server doesn't have a resource type "x" (Kubernetes)doesn't have a reso…no context exists with the name — error: no context exists with the name: "x" (Kubernetes)no context exists w…ALREADY_EXISTS — API Error: Resource already exists (ALREADY_EXISTS / resource_already_exists / 409) (API)ALREADY_EXISTSfield is immutable — The Deployment is invalid: spec.selector: Invalid value: field is immutable (Kubernetes)field is immutableunknown field — strict decoding error: unknown field "spec.template.spec.containers[0].ports[0].protocl" (Kubernetes)unknown fieldTerminating — Pod stuck in Terminating state (Kubernetes)TerminatingMetrics API not available — error: Metrics API not available / HPA: unable to get metrics for resource cpu (Kubernetes)Metrics API not ava…admission webhook denied the request — Error from server: admission webhook "validate.nginx.ingress.kubernetes.io" denied the request (Kubernetes)admission webhook d…403 — HTTP 403 Forbidden (HTTP)403AuthorizationFailed — Azure: AuthorizationFailed — The client does not have authorization to perform action (Azure)AuthorizationFailedAuthorizationPermissionMismatch — Azure Storage: AuthorizationPermissionMismatch (403) — This request is not authorized to perform this operation using this permission (Azure)AuthorizationPermis…

Directly related (7)

is waiting to startKubernetes

Error from server (BadRequest): container "x" in pod "y" is waiting to start: ContainerCreating

kubectl logs has nothing to show yet — the container hasn’t started (still creating, pulling, or blocked).

kubectl connection refusedKubernetes

kubectl: The connection to the server localhost:8080 was refused — did you specify the right host or port?

kubectl has no usable kubeconfig, so it falls back to localhost:8080 — or the cluster API server is unreachable.

x509 (kubectl)Kubernetes

Unable to connect to the server: x509: certificate has expired or is not yet valid / certificate signed by unknown authority

kubectl doesn’t trust the API server’s certificate — it expired (kubeadm clusters after 1 year), the CA in kubeconfig is wrong, o…

NotFoundKubernetes

Error from server (NotFound): deployments.apps "x" not found

The named object doesn’t exist in the namespace/cluster kubectl is pointing at.

AlreadyExistsKubernetes

Error from server (AlreadyExists): ... already exists

kubectl create tried to make an object whose name is already taken in that namespace.

namespace TerminatingKubernetes

Namespace stuck in Terminating

A deleted namespace never disappears because some resource inside it, or the namespace’s own finalizer, can’t be cleaned up.

ForbiddenKubernetes

Error from server (Forbidden): pods is forbidden: User "x" cannot list resource "pods" in API group "" in the namespace

You’re authenticated to the cluster, but RBAC doesn’t give your user or service account that verb on that resource.

Two steps away (19)

CrashLoopBackOffKubernetes

Kubernetes: CrashLoopBackOff

The container starts, crashes (or exits), and Kubernetes keeps restarting it with increasing back-off delays.

500HTTP

HTTP 500 Internal Server Error

The server hit an unexpected condition — usually an unhandled exception or misconfiguration in the application.

499HTTP

HTTP 499 Client Closed Request (Nginx)

Nginx-specific code logged when the client disconnected before the server finished responding.

ECONNREFUSEDNode.js

Error: connect ECONNREFUSED 127.0.0.1:5432

Nothing is listening at that host:port — the target service is down or you’re connecting to the wrong address.

ExpiredTokenAWS

AWS: ExpiredToken — The security token included in the request is expired

Temporary AWS credentials (STS/SSO/assumed role) have expired.

You must be logged in to the serverKubernetes

error: You must be logged in to the server (Unauthorized)

The cluster rejected kubectl’s credentials — expired token, wrong kubeconfig user, or cloud IAM identity not allowed.

CERTIFICATE_VERIFY_FAILEDAPI

SSL: CERTIFICATE_VERIFY_FAILED / unable to get local issuer certificate

The client couldn’t verify the server’s TLS certificate chain, so it refused the HTTPS connection.

Unable to connect to the server: dial tcp i/o timeoutKubernetes

Unable to connect to the server: dial tcp <ip>:443: i/o timeout

kubectl can’t reach the API server at all — network path, VPN, firewall or a private endpoint you’re outside of.

doesn't have a resource typeKubernetes

error: the server doesn't have a resource type "x"

kubectl doesn’t know the resource name you typed — a typo, a CRD that isn’t installed, or a stale discovery cache.

no context exists with the nameKubernetes

error: no context exists with the name: "x"

kubectl was told to use a context that isn’t in the loaded kubeconfig file(s).

ALREADY_EXISTSAPI

API Error: Resource already exists (ALREADY_EXISTS / resource_already_exists / 409)

The create request was refused because an object with the same unique identity — name, email, external ID — already exists.

field is immutableKubernetes

The Deployment is invalid: spec.selector: Invalid value: field is immutable

You tried to change a field Kubernetes doesn’t allow to change after creation — Deployment selectors, Job templates, Service clus…

unknown fieldKubernetes

strict decoding error: unknown field "spec.template.spec.containers[0].ports[0].protocl"

The manifest contains a field the API schema doesn’t know — a typo, wrong indentation, or a field from another API version.

TerminatingKubernetes

Pod stuck in Terminating state

kubectl delete pod hangs and the pod shows Terminating for minutes or forever.

Metrics API not availableKubernetes

error: Metrics API not available / HPA: unable to get metrics for resource cpu

metrics-server isn’t installed or isn’t working, so kubectl top and CPU/memory HorizontalPodAutoscalers have no data.

admission webhook denied the requestKubernetes

Error from server: admission webhook "validate.nginx.ingress.kubernetes.io" denied the request

A validating admission webhook (ingress-nginx, Gatekeeper/OPA, Kyverno) inspected your object and rejected it; the reason follows…

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

AuthorizationFailedAzure

Azure: AuthorizationFailed — The client does not have authorization to perform action

The signed-in identity (user, service principal or managed identity) lacks an Azure RBAC role for that action on that scope.

AuthorizationPermissionMismatchAzure

Azure Storage: AuthorizationPermissionMismatch (403) — This request is not authorized to perform this operation using this permission

You’re accessing blob/queue data with Microsoft Entra ID, but the identity has only management roles (Owner/Contributor) — not a…