<p>I just tried to install Linkerd viz extension following official documentation but all the pods are in a crash loop.</p>
<pre><code>linkerd viz install | kubectl apply -f -
</code></pre>
<p><a href="https://linkerd.io/2.10/getting-started/" rel="nofollow noreferrer">Linkerd-getting-started</a></p>
<pre><code>r proxy-admin
[    29.797889s]  INFO ThreadId(02) daemon:admin{listen.addr=0.0.0.0:4191}: linkerd_app_inbound::policy::authorize::http: Request denied server=proxy-admin tls=None(NoClientHello) client=50.50.55.177:47068
[    29.797910s]  INFO ThreadId(02) daemon:admin{listen.addr=0.0.0.0:4191}:rescue{client.addr=50.50.55.177:47068}: linkerd_app_core::errors::respond: Request failed error=unauthorized connection on server proxy-admin
[    29.817790s]  INFO ThreadId(01) linkerd_proxy::signal: received SIGTERM, starting shutdown
</code></pre>
<p>The error appeared on Kubernetes cluster <code>Server Version: v1.21.5-eks-bc4871b</code></p>

Adiii
<p>The issue was the policy that come by default installation.</p>
<p>This authorizes unauthenticated requests from IPs in the <code>clusterNetworks configuration</code>. If the source IP <code>(&lt;public-ip-address-of-hel-k1&gt;)</code> is not in that list, these connections will be denied. To fix this, the authorization policy could be updated with the following:</p>
<pre><code>spec:
  client:
    unauthenticated: true
  networks:
  - cidr: 0.0.0.0/0
</code></pre>
<p>The default policy missing the client part</p>
<pre><code>    networks:
      - cidr: 0.0.0.0/0
</code></pre>
<p>To update the policy, get the server authorization</p>
<pre><code>k get ServerAuthorization -n linkerd-viz
NAME           SERVER
admin          admin
grafana        grafana
metrics-api    metrics-api
proxy-admin    proxy-admin
</code></pre>
<p>Now edit admin,grafana, proxy-admin and grafana and add the <code>networks</code> part.</p>
<pre><code> k edit ServerAuthorization metrics-api
</code></pre>
<p>as after fixing this I was also getting errors for grafana which help me to fix by adding network part.</p>
<pre><code>[    32.278014s]  INFO ThreadId(01) inbound:server{port=3000}:rescue{client.addr=50.50.53.140:44718}: linkerd_app_core::errors::respond: Request failed error=unauthorized connection on server grafana
[    38.176927s]  INFO ThreadId(01) inbound:server{port=3000}: linkerd_app_inbound::policy::authorize::http: Request denied server=grafana tls=None(NoClientHello) client=50.50.55.177:33170
</code></pre>
<p><a href="https://github.com/linkerd/linkerd2/issues/7233" rel="nofollow noreferrer">All linkerd-viz pods in CrashLoopBackOff</a></p>
