# Metrics server Pod is CrashLoopBackOff

**URL:** <https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385>\
**Category:** General Discussions\
**Created:** [January 21, 2020, 3:51pm UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385 "2020-01-21T15:51:26Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![vkatukam](https://avatars.discourse-cdn.com/v4/letter/v/97f17d/32.png) [@vkatukam](https://discuss.kubernetes.io/u/vkatukam)\
**Post date:** [January 21, 2020, 3:51pm UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/1 "2020-01-21T15:51:26Z")

</div>

metrics server pod is crashing with the below error.

panic: failed to create listener: failed to listen on 0.0.0.0:443: listen tcp 0.0.0.0:443: bind: permission denied

metrics server is installed using [https://github.com/kubernetes-sigs/metrics-server.git](https://github.com/kubernetes-sigs/metrics-server.git)

### Cluster information:

Kubernetes version:  
Client Version: v1.17.1  
Server Version: v1.17.1  
Cloud being used: installed On-premise environment(Redhat Linux server 7)  
Installation method: manual(followed the steps are given [Installing kubeadm - Kubernetes](https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/)) and created cluster  
Host OS: Redhat Linux server 7  
Flannel overlay network installed  
CNI and version:

CRI and version:

You can format your yaml by highlighting it and pressing Ctrl-Shift-C, it will make your output easier to read.

---

<div class="post-metadata">

**Author:** ![tomasz.prus](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/tomasz.prus/32/6934_2.png) [@tomasz.prus](https://discuss.kubernetes.io/u/tomasz.prus)\
**Post date:** [January 21, 2020, 8:23pm UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/2 "2020-01-21T20:23:52Z")

</div>

It looks like your pod wants to bind to port 443 which is allowed only for root user (ports \< 1024 are restricted). Do you use these manifests: [https://github.com/kubernetes-sigs/metrics-server/tree/master/deploy/1.8%2B](https://github.com/kubernetes-sigs/metrics-server/tree/master/deploy/1.8%2B) to deploy it?

---

<div class="post-metadata">

**Author:** ![vkatukam](https://avatars.discourse-cdn.com/v4/letter/v/97f17d/32.png) [@vkatukam](https://discuss.kubernetes.io/u/vkatukam)\
**Post date:** [January 22, 2020, 7:00am UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/3 "2020-01-22T07:00:13Z")

</div>

ports:

- port: 443  
protocol: TCP  
targetPort: main-port

yes, i see above in service object, Could you please guide me to fix it.

---

<div class="post-metadata">

**Author:** ![tomasz.prus](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/tomasz.prus/32/6934_2.png) [@tomasz.prus](https://discuss.kubernetes.io/u/tomasz.prus)\
**Post date:** [January 22, 2020, 7:35am UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/4 "2020-01-22T07:35:46Z")

</div>

Service can have low numbered ports, the problem is with pod with such ports.

In this script we can see that port start on port 4443 (additional args and in template.spec).

> <https://github.com/kubernetes-sigs/metrics-server/blob/master/deploy/1.8+/metrics-server-deployment.yaml#L35>

---

<div class="post-metadata">

**Author:** ![vkatukam](https://avatars.discourse-cdn.com/v4/letter/v/97f17d/32.png) [@vkatukam](https://discuss.kubernetes.io/u/vkatukam)\
**Post date:** [January 22, 2020, 7:56am UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/5 "2020-01-22T07:56:23Z")

</div>

i have modified like below and still getting same error. Please help me to fix it.

spec:  
serviceAccountName: metrics-server  
volumes:  
# mount in tmp so we can safely use from-scratch images and/or read-only containers  
- name: tmp-dir  
emptyDir: {}  
containers:  
- name: metrics-server  
image: [k8s.gcr.io/metrics-server-amd64:v0.3.6](http://k8s.gcr.io/metrics-server-amd64:v0.3.6)  
args:  
- --cert-dir=/tmp  
- --kubelet-insecure-tls  
ports:  
- name: main-port  
containerPort: 4443  
protocol: TCP  
securityContext:

---

<div class="post-metadata">

**Author:** ![tomasz.prus](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/tomasz.prus/32/6934_2.png) [@tomasz.prus](https://discuss.kubernetes.io/u/tomasz.prus)\
**Post date:** [January 22, 2020, 8:36am UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/6 "2020-01-22T08:36:31Z")

</div>

Your args:

```auto
args:
- --cert-dir=/tmp
- --kubelet-insecure-tls

```

but

```auto
    - --secure-port=4443

```

is missing…

---

<div class="post-metadata">

**Author:** ![vkatukam](https://avatars.discourse-cdn.com/v4/letter/v/97f17d/32.png) [@vkatukam](https://discuss.kubernetes.io/u/vkatukam)\
**Post date:** [January 22, 2020, 9:40am UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/7 "2020-01-22T09:40:03Z")

</div>

i have added it to deployment, but getting below error  
args:  
- --cert-dir=/tmp  
- --kubelet-insecure-tls  
**- --secure-port=4443**  
ports:

**panic: Get [https://10.96.0.1:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication:](https://10.96.0.1:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication:) dial tcp 10.96.0.1:443: connect: no route to host**

---

<div class="post-metadata">

**Author:** ![vkatukam](https://avatars.discourse-cdn.com/v4/letter/v/97f17d/32.png) [@vkatukam](https://discuss.kubernetes.io/u/vkatukam)\
**Post date:** [January 23, 2020, 11:40am UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/8 "2020-01-23T11:40:41Z")

</div>

Can anyone help me on this.

---

<div class="post-metadata">

**Author:** ![vishnu](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/vishnu/32/5744_2.png) [@vishnu](https://discuss.kubernetes.io/u/vishnu)\
**Post date:** [August 23, 2020, 3:35pm UTC](https://discuss.kubernetes.io/t/metrics-server-pod-is-crashloopbackoff/9385/9 "2020-08-23T15:35:23Z")

</div>

@vkatukam : were you able to fix the issue ?