一键部署后ks-controller-manage显示 CrashLoopBackOff

nuoccc

用了一键部署后发现 controller-manage pod 无法运行
如下图

然后发现是openldap svc失败

有什么解决的办法吗?

nuoccc

发现oepnldap的所有连接都掉了有什么解决的方法吗?

nuoccc

5f6338f0 @(#) $OpenLDAP: slapd 2.4.50+dfsg-1_bpo10+1 (May 4 2020 05:25:06) $
Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org>
5f6338f0 slapd starting
5f633911 conn=1000 fd=12 ACCEPT from IP=10.170.17.4:40076 (IP=0.0.0.0:389)
5f633911 conn=1000 fd=12 closed (connection lost)
5f633911 conn=1001 fd=12 ACCEPT from IP=10.170.17.4:40078 (IP=0.0.0.0:389)
5f633911 conn=1001 fd=12 closed (connection lost)
5f633920 conn=1002 fd=12 ACCEPT from IP=10.170.17.4:40246 (IP=0.0.0.0:389)
5f633920 conn=1002 fd=12 closed (connection lost)
5f633920 conn=1003 fd=12 ACCEPT from IP=10.170.17.4:40250 (IP=0.0.0.0:389)
5f633920 conn=1003 fd=12 closed (connection lost)
5f63392f conn=1004 fd=12 ACCEPT from IP=10.170.17.4:40426 (IP=0.0.0.0:389)
5f63392f conn=1004 fd=12 closed (connection lost)

Forest-L

nuoccc 1、openldap pod的日志提供下，kubectl logs 。
2、可以看下ep创建了没，kubectl get endpoints -n kubesphere-system。

nuoccc

Forest-L 打印结果如下
[root@master _]# kubectl get endpoints -n kubesphere-system
NAME ENDPOINTS AGE
ks-apiserver 10.233.70.19:9090 14h
ks-console 10.233.70.13:8000 14h
ks-controller-manager 14h
openldap 10.233.70.25:389 14h
redis 10.233.70.10:6379 14h

nuoccc

Forest-L 查看openldap
[root@master _]# kubectl describe endpoints openldap -n kubesphere-system
Name: openldap
Namespace: kubesphere-system
Labels: app.kubernetes.io/instance=ks-openldap
app.kubernetes.io/managed-by=Helm
app.kubernetes.io/name=openldap-ha
service.kubernetes.io/headless=
Annotations: <none>
Subsets:
Addresses: 10.233.70.25
NotReadyAddresses: <none>
Ports:
Name Port Protocol

ldap 389 TCP

Events: <none>

nuoccc

Forest-L ks-controller-manager
[root@master _]# kubectl describe endpoints ks-controller-manager -n kubesphere-system
Name: ks-controller-manager
Namespace: kubesphere-system
Labels: app=ks-controller-manager
tier=backend
version=v3.0.0
Annotations: endpoints.kubernetes.io/last-change-trigger-time: 2020-09-18T09:18:51+08:00
Subsets:
Addresses: 10.233.70.20
NotReadyAddresses: <none>
Ports:
Name Port Protocol

<unset> 8443 TCP

Events: <none>

nuoccc

Forest-L ks-controller-manager的 service的定义
[root@master _]# kubectl describe svc ks-controller-manager -n kubesphere-system
Name: ks-controller-manager
Namespace: kubesphere-system
Labels: app=ks-controller-manager
tier=backend
version=v3.0.0
Annotations: Selector: app=ks-controller-manager,tier=backend,version=v3.0.0
Type: ClusterIP
IP: 10.233.36.79
Port: <unset> 443/TCP
TargetPort: 8443/TCP
Endpoints:

Session Affinity: None
Events: <none>