iStio豆荚没有出现

Question

我已经通过Rancher UI Long安装了ISTIO-1.8.3，并且Istio Pods和

Ingress Gateway Pod启动并运行，并且我的应用程序由ISTIO提供服务。

现在，最近我们将K8的集群版本从1.21升级到1.22，然后将1.22升至1.23。

一旦我们重新启动了库布勒特，iStio Pods曾经没有提出任何问题。

现在，由于很少的问题，我们重新启动了节点和iStio Pod，因此它们处于运行状态，但准备就绪探针正在失败。

我能够找到的错误在

failed to list CRDs: the server could not find the requested resource

下面是ISTIO POD的完整日志。

stream logs failed container "discovery" in pod "istiod-5fbc9568cd-qgqkk" is waiting to start: ContainerCreating for istio-system/istiod-5fbc9568cd-qgqkk (discovery)
2022-06-27T05:35:32.772949Z    info    FLAG: --log_rotate_max_age="30"
2022-06-27T05:35:32.772952Z    info    FLAG: --log_rotate_max_backups="1000"
2022-06-27T05:35:32.772955Z    info    FLAG: --log_rotate_max_size="104857600"
2022-06-27T05:35:32.772958Z    info    FLAG: --log_stacktrace_level="default:none"
2022-06-27T05:35:32.772963Z    info    FLAG: --log_target="[stdout]"
2022-06-27T05:35:32.772971Z    info    FLAG: --mcpInitialConnWindowSize="1048576"
2022-06-27T05:35:32.772974Z    info    FLAG: --mcpInitialWindowSize="1048576"
2022-06-27T05:35:32.772977Z    info    FLAG: --mcpMaxMsgSize="4194304"
2022-06-27T05:35:32.772980Z    info    FLAG: --meshConfig="./etc/istio/config/mesh"
2022-06-27T05:35:32.772982Z    info    FLAG: --monitoringAddr=":15014"
2022-06-27T05:35:32.772985Z    info    FLAG: --namespace="istio-system"
2022-06-27T05:35:32.772988Z    info    FLAG: --networksConfig="/etc/istio/config/meshNetworks"
2022-06-27T05:35:32.772999Z    info    FLAG: --plugins="[authn,authz,health]"
2022-06-27T05:35:32.773002Z    info    FLAG: --profile="true"
2022-06-27T05:35:32.773005Z    info    FLAG: --registries="[Kubernetes]"
2022-06-27T05:35:32.773008Z    info    FLAG: --resync="1m0s"
2022-06-27T05:35:32.773011Z    info    FLAG: --secureGRPCAddr=":15012"
2022-06-27T05:35:32.773013Z    info    FLAG: --tlsCertFile=""
2022-06-27T05:35:32.773016Z    info    FLAG: --tlsKeyFile=""
2022-06-27T05:35:32.773018Z    info    FLAG: --trust-domain=""
2022-06-27T05:35:32.801976Z    info    klog    Config not found: /var/run/secrets/remote/config[]
2022-06-27T05:35:32.803516Z    info    initializing mesh configuration ./etc/istio/config/mesh
2022-06-27T05:35:32.804499Z    info    mesh configuration: {
    "proxyListenPort": 15001,
    "connectTimeout": "10s",
    "protocolDetectionTimeout": "0s",
    "ingressClass": "istio",
    "ingressService": "istio-ingressgateway",
    "ingressControllerMode": "STRICT",
    "enableTracing": true,
    "defaultConfig": {
        "configPath": "./etc/istio/proxy",
        "binaryPath": "/usr/local/bin/envoy",
        "serviceCluster": "istio-proxy",
        "drainDuration": "45s",
        "parentShutdownDuration": "60s",
        "discoveryAddress": "istiod.istio-system.svc:15012",
        "proxyAdminPort": 15000,
        "controlPlaneAuthPolicy": "MUTUAL_TLS",
        "statNameLength": 189,
        "concurrency": 2,
        "tracing": {
            "zipkin": {
                "address": "zipkin.istio-system:9411"
            }
        },
        "envoyAccessLogService": {

        },
        "envoyMetricsService": {

        },
        "proxyMetadata": {
            "DNS_AGENT": ""
        },
        "statusPort": 15020,
        "terminationDrainDuration": "5s"
    },
    "outboundTrafficPolicy": {
        "mode": "ALLOW_ANY"
    },
    "enableAutoMtls": true,
    "trustDomain": "cluster.local",
    "trustDomainAliases": [
    ],
    "defaultServiceExportTo": [
        "*"
    ],
    "defaultVirtualServiceExportTo": [
        "*"
    ],
    "defaultDestinationRuleExportTo": [
        "*"
    ],
    "rootNamespace": "istio-system",
    "localityLbSetting": {
        "enabled": true
    },
    "dnsRefreshRate": "5s",
    "certificates": [
    ],
    "thriftConfig": {

    },
    "serviceSettings": [
    ],
    "enablePrometheusMerge": true
}
2022-06-27T05:35:32.804516Z    info    version: 1.8.3-e282a1f927086cc046b967f0171840e238a9aa8c-Clean
2022-06-27T05:35:32.804699Z    info    flags: 
2022-06-27T05:35:32.804706Z    info    initializing mesh networks
2022-06-27T05:35:32.804877Z    info    mesh networks configuration: {
   "networks": {
   }
}
2022-06-27T05:35:32.804938Z    info    initializing mesh handlers
2022-06-27T05:35:32.804949Z    info    initializing controllers
2022-06-27T05:35:32.804952Z    info    No certificates specified, skipping K8S DNS certificate controller
2022-06-27T05:35:32.814002Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:35:33.816596Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:35:35.819157Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:35:39.821510Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:35:47.823675Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:36:03.827023Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:36:35.829441Z    error    kube    failed to list CRDs: the server could not find the requested resource
2022-06-27T05:37:35.831758Z    error    kube    failed to list CRDs: the server could not find the requested resource

Answer 1

将ISTIO PILOT和ISTIO INGRESS网关从1.8.3升级到1.10.2。

https://github.com/istio/istio/istio/istio/issues/34665

Answer 2

ISTIO版本1.8.X版本太旧版本，对于Kubernetes 1.23。您可以参考iStio documentation 用于K8S和ISTIO组合支持和升级ISTIO ISTIO ISTIO ISTIO ISTIO ISTIO ISTIO ISTIO ISTIO ISTIO ISTIO