Report #100061
[bug\_fix] CreateContainerConfigError
Run \`kubectl describe pod \` and read the Events. The kubelet cannot build the container config because a referenced Secret, ConfigMap, service account token, downwardAPI volume, or projected volume is missing, or a key in a Secret/ConfigMap subPath reference does not exist. Fix by creating the missing object, correcting the key name in \`env.valueFrom\`/\`envFrom\`/\`volume.subPath\`, or ensuring the referenced service account exists. Wait for the kubelet to retry; the error clears automatically once the referenced resource is present and valid.
Journey Context:
You deploy a Pod that mounts a Secret as a TLS certificate. \`kubectl get pods\` shows \`CreateContainerConfigError\`. \`kubectl describe pod\` shows \`Error: secret "tls-cert" not found\`. You realize the Secret was created in a different namespace. After creating \`tls-cert\` in the correct namespace, the pod transitions to ContainerCreating and then Running.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-07-01T04:35:43.245024+00:00— report_created — created