for-matK零S
没法远程。。
我到这一步,都是正常的,这里也显示了istio-proxy,创建后是就绪的,但是查看pod状态,就没有这个istio-proxy了
没法远程。。
我到这一步,都是正常的,这里也显示了istio-proxy,创建后是就绪的,但是查看pod状态,就没有这个istio-proxy了
不行我再手动部署istio官方的实例试试
Jeff label是我看istio文档后手动打的
[root@master100 ~]# kubectl get ns test-namespace -o yaml
apiVersion: v1
kind: Namespace
metadata:
annotations:
creator: admin
openpitrix_runtime: runtime-BVzjOO3LRJQA
creationTimestamp: "2019-10-16T11:22:14Z"
finalizers:
- finalizers.kubesphere.io/namespaces
labels:
istio-injection: enabled
kubesphere.io/workspace: test-workspace
name: test-namespace
ownerReferences:
- apiVersion: tenant.kubesphere.io/v1alpha1
blockOwnerDeletion: true
controller: true
kind: Workspace
name: test-workspace
uid: 233958f4-f007-11e9-93ab-52560ade2364
resourceVersion: "9674211"
selfLink: /api/v1/namespaces/test-namespace
uid: 3486cf19-f007-11e9-9044-52560ade2365
spec:
finalizers:
- kubernetes
status:
phase: Active
我滴妈呀,终于解决了
1、我是已有k8s集群上搭的kubesphere
kube-apiserver的启动参数中,要有–admission-control=MutatingAdmissionWebhook,开启自动注入
2、MutatingWebhookConfiguration配置有问题
kubectl -n istio-system edit MutatingWebhookConfiguration istio-sidecar-injector
下面两个参数改成In和enabled
operator: In
values:
- enabled
3、给用到的namespace打标签
kubectl label namespace test-namespace istio-injection=enabled
4、感谢大佬帮忙
不知道是不是默认都会这样,我装了两次是都不行。也可能是因为我自己搭的集群