# Level=error msg="subset not found for namespace/service" providerName=kubernetescrd ingress=xxx namespace=xxx

**URL:** <https://community.traefik.io/t/level-error-msg-subset-not-found-for-namespace-service-providername-kubernetescrd-ingress-xxx-namespace-xxx/7463>\
**Category:** Traefik v2\
**Tags:** kubernetes-ingress, kubernetes-crd\
**Created:** [August 28, 2020, 3:02pm UTC](https://community.traefik.io/t/level-error-msg-subset-not-found-for-namespace-service-providername-kubernetescrd-ingress-xxx-namespace-xxx/7463 "2020-08-28T15:02:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sanjeevrg89](https://avatars.discourse-cdn.com/v4/letter/s/ea5d25/32.png) [@sanjeevrg89](https://community.traefik.io/u/sanjeevrg89)\
**Post date:** [August 28, 2020, 3:02pm UTC](https://community.traefik.io/t/level-error-msg-subset-not-found-for-namespace-service-providername-kubernetescrd-ingress-xxx-namespace-xxx/7463/1 "2020-08-28T15:02:02Z")

</div>

I am running Traefik v2 on GKE cluster. Traefik is deployed via helm chart. I have an angular app deployed in a namespace (Deployment, Service). I have deployed an IngressRoute for the app. When I look at the traefik logs I get this error

Error:  
time="2020-08-27T20:38:05Z" level=error msg="subset not found for demo/xxx-svc" providerName=kubernetescrd ingress=xxx namespace=demo

I see the Service has the pod as its endpoint. Pod is up and running fine with an IP assigned to it.

Traefik has its endpoint (An Internal Load balancer on GKE is created when traefik was deployed via helm chart)

Deployment YAML

```auto
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ .Values.appName }}
  labels:
    app: {{ .Values.appName }}
spec:
  selector:
    matchLabels:
      app: {{ .Values.appName }}
  replicas: {{ .Values.replicaCount }}
  template:
    metadata:
      labels:
        app: {{ .Values.appName }}
    spec:
      containers:
        - name: {{ .Values.appName }}
          image: {{ .Values.imageSha }}
          imagePullPolicy: Always
          securityContext:
            allowPrivilegeEscalation: false
            runAsUser: 1000
          ports:
            - containerPort: 8080
              protocol: TCP

```

Service YAML

```auto
apiVersion: v1
kind: Service
metadata:
  name: {{ .Values.appName }}-svc
  labels:
    app: {{ .Values.appName }}
spec:
  type: ClusterIP
  selector:
    app: {{ .Values.appName }}
  ports:
  - port: 8080
    protocol: TCP
    targetPort: 8080

```

IngressRoute YAML manifest:

```auto
apiVersion: traefik.containo.us/v1alpha1

kind: IngressRoute

metadata:

  name: {{ .Values.appName }}-ingress

  namespace: {{ .Values.namespace }}

spec:

  entryPoints:

    - web

  routes:

  - match: Host(`xxx.xxx`)

    kind: Rule

    services:

    - kind: Service

      name: {{ .Values.appName }}-svc

      namespace: demo

      port: 8080

  tls:

    secretName: cert

```

Any help here would be appreciated

---

<div class="post-metadata">

**Author:** ![douglasdtm](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/douglasdtm/32/2002_2.png) [@douglasdtm](https://community.traefik.io/u/douglasdtm)\
**Post date:** [September 1, 2020, 12:09am UTC](https://community.traefik.io/t/level-error-msg-subset-not-found-for-namespace-service-providername-kubernetescrd-ingress-xxx-namespace-xxx/7463/2 "2020-09-01T00:09:24Z")

</div>

Hello @sanjeevrg89 this issue is probably related to a [Kubernetes bug](https://github.com/kubernetes/kubernetes/issues/47711) that was recently [fixed and merged](https://github.com/kubernetes/kubernetes/pull/93030).

You can follow [this issue](https://github.com/containous/traefik/issues/6821) to track it on Traefik, but in case we confirm this it will probably be closed soon.

As a workaround it seems that updating / redeploying the service again may clear the faulty cache allowing Kubernetes to create the correct endpoints.