kubernetes - Istio Sidecar 注入失败
问题描述
我已经在我的 k8 集群中成功安装了 istio,发布后我按照 GitHub ULR https://github.com/istio/istio/blob/master/samples/bookinfo/platform/kube/bookinfo.yaml 部署了 bookinfo 应用程序。
部署后,我的 bookinfo 部署 pod 在我的测试 ns 中不可用。
请找到以下 istio-system 名称空间
NAME READY STATUS RESTARTS AGE
grafana-784c89f4cf-cxpcz 1/1 Running 0 15d
istio-egressgateway-bd477794-qv7n8 1/1 Running 0 15d
istio-ingressgateway-79df7c789f-qlqcf 1/1 Running 0 15d
istiod-6dc55bbdd-t5klg 1/1 Running 0 15d
jaeger-7f78b6fb65-xhz8j 1/1 Running 0 15d
kiali-dc84967d9-99lwv 1/1 Running 0 15d
prometheus-7bfddb8dbf-nd4gn 2/2 Running 0 15d
bookinfo 部署
root@master:~/istio-session# kubectl get pod,deployment,rs
NAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/details-v1 0/1 0 0 62m
deployment.apps/productpage-v1 0/1 0 0 62m
deployment.apps/ratings-v1 0/1 0 0 62m
deployment.apps/reviews-v1 0/1 0 0 62m
deployment.apps/reviews-v2 0/1 0 0 62m
deployment.apps/reviews-v3 0/1 0 0 62m
NAME DESIRED CURRENT READY AGE
replicaset.apps/details-v1-79f774bdb9 1 0 0 62m
replicaset.apps/productpage-v1-6b746f74dc 1 0 0 62m
replicaset.apps/ratings-v1-b6994bb9 1 0 0 62m
replicaset.apps/reviews-v1-545db77b95 1 0 0 62m
replicaset.apps/reviews-v2-7bf8c9648f 1 0 0 62m
replicaset.apps/reviews-v3-84779c7bbc 1 0 0 62m
这里是来自 k8 的事件
stio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": context deadline exceeded
45m Warning FailedCreate replicaset/reviews-v3-84779c7bbc Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
42m Warning FailedCreate replicaset/reviews-v3-84779c7bbc Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": dial tcp 10.102.193.69:443: i/o timeout
52m Normal ScalingReplicaSet deployment/reviews-v3 Scaled up replica set reviews-v3-84779c7bbc
注意:需要的端口已经打开 10250,tcp:443,tcp:15017
你能请人帮我吗
解决方案
推荐阅读
- docker - 无法将文件复制到 docker 主机
- c++ - C++ iterate container backwards N steps
- sorting - 合并多个 jq 调用以对对象流的内容进行排序和限制
- javascript - 使用 CSS 将 Html 表导出到 Excel
- python-3.x - 是否有一个 Phython 函数可以精确打印两个返回值?
- jquery - 如何在jQuery中找到具有较少子项目数的项目
- python - 给定索引应重复的次数,如何创建索引数组?
- python - 如何使用熊猫将嵌套字典(json)列表转换为自定义数据框?
- python - 为什么 VSCode 在启动调试器之前不激活 conda?
- api - 如何在 jenkins 中使用 curl api 或 REST API 或 crumbissuer 添加凭据用户名和密码?