调试ISTIO SIDECAR注入

发布于 2025-02-13 18:59:34 字数 349 浏览 2 评论 0原文

我已经在EKS群集上安装了ISTIO。开始发生的事情是，出于某种神秘的原因，Istio停止在新豆荚上执行边锋注射。我已经证实了这些名称空间已正确标记，并且POD没有横码注入。我确实注意到，在某个时候，突变的webhookconfiguration已更改，但老实说，我不确定如何。我恢复了突变的Webhookconfiguration的变化，但是由于某种原因，Istio仍然没有在标记的名称空间上自动注入Sidecars。

我该如何调试？我已经尝试了ISTIO常见问题解答中的大多数事情，但它似乎仍然不起作用。似乎解决问题的唯一一件事是运行

istioctl install -f <install file>

原文

I've installed istio on an EKS cluster. What started happening is that for some mysterious reason, istio stops executing sidecar injection on new pods. I've verified that the namespaces have been properly labels, and that the pods do not have sidecar injection disabled. I did notice that the mutatingwebhookconfiguration at some point was changed, but honestly I'm not sure how. I reverted the change in the mutatingwebhookconfiguration, but for some reason istio still does not auto inject sidecars on the labeled namespace.

How can I debug this? I've tried most of the things in the istio FAQ, but it still doesn't seem to work. The only thing that seems to fix the issue is running