使用 All-in-One模式安装3.0成功,后使用Web控制台启用多个可插拔组件,成功
问题:访问KubeSphere Web控制台(端口30880),经常无法访问,一会好一会坏;刷新网页一会能访问一会不能访问;其他端口服务没有这个问题(例如Jenkins,端口301880)
可访问时:

不可访问时:

  • 将服务ks-console的外部流量策略externalTrafficPolicy由Cluster改为Local,解决了访问时断时续的问题,留下个疑问,就是为什么Cluster模式的外部流量策略会出现时断时续的问题呢

  1. 具体环境是什么样的? kubesphere 在局域网,还是云主机或者有VPN连接
  2. 检查一下有没有pod不断重启,例如ks-console

    RolandMa1986
    局域网
    浏览器刷新无法访问时,使用之前连接的KubeSphere Web控制台的网页版Kubectl工具,curl命令可访问web console,也就是在集群内是可以访问的,但是在k8s集群所在物理机器的操作系统中使用curl命令则不能访问web console,感觉像是网关转发不到Endpoint,哪位大神指点一下如何排查,小白一枚

      trdc 看你的截图中kubectl 也有问题,你的环境中有设置过代理之类的吗?

      • trdc 回复了此帖

        RolandMa1986
        感谢,服务器在内网,无法访问外网,之前设置代理安装kubesphere3.0来着;去掉代理kubectl命令好使了;但是kubesphere web控制台的问题依旧,一会好一会坏,大部分时间不能访问

        使用kubeye检测如下:

        [root@localhost kubeye]# ./ke diag
        I0120 09:21:00.940610   30464 request.go:621] Throttling request took 1.044014641s, request: GET:https://lb.kubesphere.local:6443/apis/openebs.io/v1alpha1?timeout=32s
        ERRO[0002] Cache missed ClusterRoleBinding/kubesphere-controls-system/admin-cluster-admin again 
        ERRO[0002] Cache missed Webhook/kubesphere-logging-system/kube-auditing-webhook again 
        ERRO[0002] Cache missed Webhook/kubesphere-logging-system/kube-auditing-webhook again 
        
        NAMESPACE      SEVERITY   PODNAME                             EVENTTIME                   REASON                    MESSAGE
        istio-system   Warning    jaeger-collector.165b8a28fdfa8d40   2021-01-20T09:17:51+08:00   FailedGetResourceMetric   missing request for memory
        
        NAMESPACE                      SEVERITY   NAME                                                          KIND                  TIME                        MESSAGE
        kubesphere-alerting-system     Warning    alerting-client                                               Deployment            2021-01-20T09:21:01+08:00   [livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing pullPolicyNotAlways runAsRootAllowed priorityClassNotSet]
        istio-system                   Warning    istio-ingressgateway                                          Deployment            2021-01-20T09:21:01+08:00   [runAsRootAllowed notReadOnlyRootFilesystem pullPolicyNotAlways livenessProbeMissing priorityClassNotSet]
        kubesphere-monitoring-system   Warning    prometheus-operator                                           Deployment            2021-01-20T09:21:02+08:00   [livenessProbeMissing notReadOnlyRootFilesystem pullPolicyNotAlways readinessProbeMissing priorityClassNotSet]
        istio-system                   Warning    istio-galley                                                  Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem pullPolicyNotAlways runAsRootAllowed memoryRequestsMissing memoryLimitsMissing cpuLimitsMissing priorityClassNotSet]
        kube-system                    Warning    kube-proxy                                                    DaemonSet             2021-01-20T09:21:02+08:00   [livenessProbeMissing notReadOnlyRootFilesystem runAsRootAllowed pullPolicyNotAlways cpuLimitsMissing memoryLimitsMissing runAsPrivileged cpuRequestsMissing memoryRequestsMissing readinessProbeMissing hostNetworkSet]
        kubesphere-controls-system     Warning    default-http-backend                                          Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem pullPolicyNotAlways readinessProbeMissing runAsRootAllowed priorityClassNotSet]
        kube-system                    Warning    calico-kube-controllers                                       Deployment            2021-01-20T09:21:02+08:00   [cpuRequestsMissing memoryLimitsMissing memoryRequestsMissing cpuLimitsMissing livenessProbeMissing notReadOnlyRootFilesystem pullPolicyNotAlways runAsRootAllowed]
        kubesphere-monitoring-system   Warning    k8s                                                           Prometheus            2021-01-20T09:21:02+08:00   [runAsRootAllowed notReadOnlyRootFilesystem pullPolicyNotAlways priorityClassNotSet]
        kube-system                    Warning    metrics-server                                                Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways cpuRequestsMissing hostPortSet cpuLimitsMissing memoryLimitsMissing memoryRequestsMissing hostNetworkSet priorityClassNotSet]
        kubesphere-devops-system       Warning    uc-jenkins-update-center                                      Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways cpuRequestsMissing livenessProbeMissing readinessProbeMissing runAsRootAllowed memoryLimitsMissing memoryRequestsMissing cpuLimitsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-alerting-system     Warning    notification-db-ctrl-job                                      Job                   2021-01-20T09:21:02+08:00   [memoryLimitsMissing pullPolicyNotAlways readinessProbeMissing runAsRootAllowed cpuLimitsMissing livenessProbeMissing memoryRequestsMissing notReadOnlyRootFilesystem cpuRequestsMissing priorityClassNotSet]
        kubesphere-alerting-system     Warning    alerting-db-ctrl-job                                          Job                   2021-01-20T09:21:02+08:00   [livenessProbeMissing readinessProbeMissing cpuRequestsMissing pullPolicyNotAlways cpuLimitsMissing memoryRequestsMissing notReadOnlyRootFilesystem memoryLimitsMissing runAsRootAllowed priorityClassNotSet]
        openpitrix-system              Warning    hyperpitrix-release-app-job                                   Job                   2021-01-20T09:21:02+08:00   [livenessProbeMissing memoryLimitsMissing notReadOnlyRootFilesystem readinessProbeMissing cpuLimitsMissing memoryRequestsMissing runAsRootAllowed pullPolicyNotAlways cpuRequestsMissing priorityClassNotSet]
        kubesphere-logging-system      Warning    elasticsearch-logging-curator-elasticsearch-curator           CronJob               2021-01-20T09:21:02+08:00   [cpuLimitsMissing livenessProbeMissing pullPolicyNotAlways memoryRequestsMissing notReadOnlyRootFilesystem cpuRequestsMissing memoryLimitsMissing readinessProbeMissing priorityClassNotSet]
        istio-system                   Warning    jaeger-operator                                               Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem runAsRootAllowed livenessProbeMissing pullPolicyNotAlways readinessProbeMissing priorityClassNotSet]
        kubesphere-monitoring-system   Warning    kube-state-metrics                                            Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem readinessProbeMissing livenessProbeMissing pullPolicyNotAlways priorityClassNotSet]
        istio-system                   Warning    istio-policy                                                  Deployment            2021-01-20T09:21:02+08:00   [memoryLimitsMissing readinessProbeMissing memoryRequestsMissing pullPolicyNotAlways runAsRootAllowed cpuLimitsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kube-system                    Warning    openebs-localpv-provisioner                                   Deployment            2021-01-20T09:21:02+08:00   [readinessProbeMissing runAsRootAllowed memoryLimitsMissing memoryRequestsMissing notReadOnlyRootFilesystem cpuLimitsMissing cpuRequestsMissing priorityClassNotSet]
        istio-system                   Warning    istio-init-crd-14-1.4.8                                       Job                   2021-01-20T09:21:02+08:00   [livenessProbeMissing pullPolicyNotAlways readinessProbeMissing notReadOnlyRootFilesystem runAsRootAllowed priorityClassNotSet]
        kubesphere-logging-system      Warning    ks-events-exporter                                            Exporter              2021-01-20T09:21:02+08:00   [livenessProbeMissing readinessProbeMissing pullPolicyNotAlways runAsRootAllowed notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-system              Warning    minio                                                         Deployment            2021-01-20T09:21:02+08:00   [memoryLimitsMissing runAsRootAllowed pullPolicyNotAlways notReadOnlyRootFilesystem cpuLimitsMissing priorityClassNotSet]
        openpitrix-system              Warning    hyperpitrix-generate-kubeconfig                               Job                   2021-01-20T09:21:02+08:00   [memoryRequestsMissing runAsRootAllowed cpuRequestsMissing livenessProbeMissing memoryLimitsMissing notReadOnlyRootFilesystem readinessProbeMissing cpuLimitsMissing pullPolicyNotAlways priorityClassNotSet]
        kubesphere-logging-system      Warning    logsidecar-injector-deploy                                    Deployment            2021-01-20T09:21:02+08:00   [readinessProbeMissing pullPolicyNotAlways livenessProbeMissing notReadOnlyRootFilesystem runAsRootAllowed priorityClassNotSet]
        kube-system                    Warning    openebs-ndm-operator                                          Deployment            2021-01-20T09:21:02+08:00   [cpuLimitsMissing memoryLimitsMissing memoryRequestsMissing runAsRootAllowed cpuRequestsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kube-system                    Warning    kube-scheduler-localhost.localdomain.cluster.local            Pod                   2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem memoryRequestsMissing memoryLimitsMissing readinessProbeMissing cpuLimitsMissing runAsRootAllowed pullPolicyNotAlways hostNetworkSet]
        istio-system                   Warning    istio-sidecar-injector                                        Deployment            2021-01-20T09:21:02+08:00   [cpuLimitsMissing memoryLimitsMissing runAsRootAllowed memoryRequestsMissing notReadOnlyRootFilesystem pullPolicyNotAlways priorityClassNotSet]
        kubesphere-monitoring-system   Warning    node-exporter                                                 DaemonSet             2021-01-20T09:21:02+08:00   [livenessProbeMissing pullPolicyNotAlways notReadOnlyRootFilesystem readinessProbeMissing hostNetworkSet hostPIDSet priorityClassNotSet]
        kube-system                    Warning    calico-node                                                   DaemonSet             2021-01-20T09:21:02+08:00   [memoryLimitsMissing memoryRequestsMissing notReadOnlyRootFilesystem pullPolicyNotAlways runAsPrivileged cpuLimitsMissing runAsRootAllowed hostNetworkSet]
        kubesphere-system              Warning    ks-apiserver                                                  Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways readinessProbeMissing notReadOnlyRootFilesystem runAsRootAllowed priorityClassNotSet]
        istio-system                   Warning    istio-init-crd-12-1.4.8                                       Job                   2021-01-20T09:21:02+08:00   [readinessProbeMissing runAsRootAllowed cpuLimitsMissing livenessProbeMissing cpuRequestsMissing memoryRequestsMissing memoryLimitsMissing notReadOnlyRootFilesystem pullPolicyNotAlways priorityClassNotSet]
        kubesphere-logging-system      Warning    ks-events-ruler                                               Ruler                 2021-01-20T09:21:02+08:00   [pullPolicyNotAlways runAsRootAllowed livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing priorityClassNotSet]
        kubesphere-devops-system       Warning    ks-jenkins                                                    Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing runAsRootAllowed priorityClassNotSet]
        kubesphere-system              Warning    ks-controller-manager                                         Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing runAsRootAllowed priorityClassNotSet]
        kubesphere-monitoring-system   Warning    main                                                          Alertmanager          2021-01-20T09:21:02+08:00   [pullPolicyNotAlways notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-monitoring-system   Warning    notification-manager-operator                                 Deployment            2021-01-20T09:21:02+08:00   [livenessProbeMissing readinessProbeMissing notReadOnlyRootFilesystem pullPolicyNotAlways runAsRootAllowed priorityClassNotSet]
        kubesphere-devops-system       Warning    s2ioperator                                                   StatefulSet           2021-01-20T09:21:02+08:00   [pullPolicyNotAlways runAsRootAllowed livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing priorityClassNotSet]
        kube-system                    Warning    kube-controller-manager-localhost.localdomain.cluster.local   Pod                   2021-01-20T09:21:02+08:00   [memoryLimitsMissing notReadOnlyRootFilesystem pullPolicyNotAlways readinessProbeMissing runAsRootAllowed cpuLimitsMissing memoryRequestsMissing hostNetworkSet]
        kubesphere-logging-system      Warning    fluentbit-operator                                            Deployment            2021-01-20T09:21:02+08:00   [livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing runAsRootAllowed pullPolicyNotAlways priorityClassNotSet]
        istio-system                   Warning    istio-citadel                                                 Deployment            2021-01-20T09:21:02+08:00   [memoryRequestsMissing memoryLimitsMissing livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing runAsRootAllowed pullPolicyNotAlways cpuLimitsMissing priorityClassNotSet]
        kubesphere-alerting-system     Warning    alerting-manager                                              Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem runAsRootAllowed readinessProbeMissing livenessProbeMissing pullPolicyNotAlways priorityClassNotSet]
        istio-system                   Warning    istio-init-crd-11-1.4.8                                       Job                   2021-01-20T09:21:02+08:00   [livenessProbeMissing notReadOnlyRootFilesystem runAsRootAllowed pullPolicyNotAlways readinessProbeMissing priorityClassNotSet]
        kubesphere-logging-system      Warning    kube-auditing-webhook-deploy                                  Webhook               2021-01-20T09:21:02+08:00   [runAsRootAllowed notReadOnlyRootFilesystem pullPolicyNotAlways priorityClassNotSet]
        kube-system                    Warning    coredns                                                       Deployment            2021-01-20T09:21:02+08:00   [cpuLimitsMissing insecureCapabilities runAsRootAllowed pullPolicyNotAlways]
        kube-system                    Warning    nodelocaldns                                                  DaemonSet             2021-01-20T09:21:02+08:00   [runAsPrivileged cpuLimitsMissing hostPortSet notReadOnlyRootFilesystem runAsRootAllowed pullPolicyNotAlways hostNetworkSet]
        kubesphere-logging-system      Warning    elasticsearch-logging-data                                    StatefulSet           2021-01-20T09:21:02+08:00   [memoryLimitsMissing notReadOnlyRootFilesystem livenessProbeMissing pullPolicyNotAlways runAsRootAllowed priorityClassNotSet]
        kubesphere-system              Warning    etcd                                                          Deployment            2021-01-20T09:21:02+08:00   [runAsRootAllowed readinessProbeMissing notReadOnlyRootFilesystem cpuLimitsMissing memoryLimitsMissing pullPolicyNotAlways cpuRequestsMissing livenessProbeMissing memoryRequestsMissing priorityClassNotSet]
        kubesphere-logging-system      Warning    ks-events-operator                                            Deployment            2021-01-20T09:21:02+08:00   [readinessProbeMissing runAsRootAllowed pullPolicyNotAlways livenessProbeMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-system              Warning    openldap                                                      StatefulSet           2021-01-20T09:21:02+08:00   [cpuRequestsMissing memoryRequestsMissing memoryLimitsMissing runAsRootAllowed notReadOnlyRootFilesystem pullPolicyNotAlways cpuLimitsMissing priorityClassNotSet]
        kubesphere-system              Warning    redis                                                         Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways livenessProbeMissing readinessProbeMissing runAsRootAllowed notReadOnlyRootFilesystem priorityClassNotSet]
        openpitrix-system              Warning    openpitrix-hyperpitrix-deployment                             Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways runAsRootAllowed livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing priorityClassNotSet]
        kubesphere-controls-system     Warning    kubesphere-router-demo-project                                Deployment            2021-01-20T09:21:02+08:00   [cpuLimitsMissing notReadOnlyRootFilesystem runAsRootAllowed cpuRequestsMissing memoryRequestsMissing pullPolicyNotAlways memoryLimitsMissing priorityClassNotSet]
        kubesphere-logging-system      Warning    fluent-bit                                                    FluentBit             2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem readinessProbeMissing runAsRootAllowed cpuLimitsMissing cpuRequestsMissing memoryLimitsMissing memoryRequestsMissing livenessProbeMissing pullPolicyNotAlways priorityClassNotSet]
        istio-system                   Warning    jaeger                                                        Jaeger                2021-01-20T09:21:02+08:00   [cpuLimitsMissing cpuRequestsMissing readinessProbeMissing livenessProbeMissing memoryRequestsMissing memoryLimitsMissing notReadOnlyRootFilesystem pullPolicyNotAlways runAsRootAllowed priorityClassNotSet]
        kubesphere-logging-system      Warning    kube-auditing-operator                                        Deployment            2021-01-20T09:21:02+08:00   [livenessProbeMissing readinessProbeMissing runAsRootAllowed notReadOnlyRootFilesystem pullPolicyNotAlways priorityClassNotSet]
        kubesphere-system              Warning    mysql                                                         Deployment            2021-01-20T09:21:02+08:00   [readinessProbeMissing cpuLimitsMissing cpuRequestsMissing livenessProbeMissing pullPolicyNotAlways memoryLimitsMissing runAsRootAllowed memoryRequestsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kube-system                    Warning    kube-apiserver-localhost.localdomain.cluster.local            Pod                   2021-01-20T09:21:02+08:00   [memoryLimitsMissing notReadOnlyRootFilesystem pullPolicyNotAlways cpuLimitsMissing readinessProbeMissing runAsRootAllowed memoryRequestsMissing hostNetworkSet]
        kubesphere-monitoring-system   Warning    notification-manager                                          NotificationManager   2021-01-20T09:21:02+08:00   [runAsRootAllowed readinessProbeMissing notReadOnlyRootFilesystem pullPolicyNotAlways livenessProbeMissing priorityClassNotSet]
        istio-system                   Warning    istio-pilot                                                   Deployment            2021-01-20T09:21:02+08:00   [runAsRootAllowed cpuLimitsMissing pullPolicyNotAlways memoryLimitsMissing livenessProbeMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kube-system                    Warning    openebs-ndm                                                   DaemonSet             2021-01-20T09:21:02+08:00   [cpuLimitsMissing readinessProbeMissing memoryLimitsMissing runAsRootAllowed cpuRequestsMissing notReadOnlyRootFilesystem runAsPrivileged memoryRequestsMissing priorityClassNotSet hostNetworkSet]
        kubesphere-alerting-system     Warning    alerting-db-init-job                                          Job                   2021-01-20T09:21:02+08:00   [cpuLimitsMissing pullPolicyNotAlways readinessProbeMissing memoryLimitsMissing memoryRequestsMissing livenessProbeMissing notReadOnlyRootFilesystem runAsRootAllowed cpuRequestsMissing priorityClassNotSet]
        kubesphere-controls-system     Warning    kubectl-admin                                                 ClusterRoleBinding    2021-01-20T09:21:02+08:00   [livenessProbeMissing pullPolicyNotAlways memoryLimitsMissing cpuRequestsMissing readinessProbeMissing runAsRootAllowed cpuLimitsMissing memoryRequestsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-alerting-system     Warning    notification-db-init-job                                      Job                   2021-01-20T09:21:02+08:00   [cpuLimitsMissing cpuRequestsMissing pullPolicyNotAlways readinessProbeMissing memoryRequestsMissing notReadOnlyRootFilesystem livenessProbeMissing memoryLimitsMissing runAsRootAllowed priorityClassNotSet]
        istio-system                   Warning    istio-init-crd-10-1.4.8                                       Job                   2021-01-20T09:21:02+08:00   [pullPolicyNotAlways runAsRootAllowed livenessProbeMissing notReadOnlyRootFilesystem readinessProbeMissing priorityClassNotSet]
        kubesphere-alerting-system     Warning    alerting-watcher                                              Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem pullPolicyNotAlways runAsRootAllowed livenessProbeMissing readinessProbeMissing priorityClassNotSet]
        kubesphere-system              Warning    ks-console                                                    Deployment            2021-01-20T09:21:02+08:00   [pullPolicyNotAlways notReadOnlyRootFilesystem readinessProbeMissing runAsRootAllowed priorityClassNotSet]
        kube-system                    Warning    snapshot-controller                                           StatefulSet           2021-01-20T09:21:02+08:00   [cpuRequestsMissing pullPolicyNotAlways runAsRootAllowed memoryRequestsMissing readinessProbeMissing livenessProbeMissing memoryLimitsMissing cpuLimitsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-alerting-system     Warning    notification-deployment                                       Deployment            2021-01-20T09:21:02+08:00   [readinessProbeMissing livenessProbeMissing runAsRootAllowed notReadOnlyRootFilesystem pullPolicyNotAlways priorityClassNotSet]
        kubesphere-logging-system      Warning    elasticsearch-logging-discovery                               StatefulSet           2021-01-20T09:21:02+08:00   [livenessProbeMissing pullPolicyNotAlways runAsRootAllowed memoryLimitsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        kubesphere-system              Warning    ks-installer                                                  Deployment            2021-01-20T09:21:02+08:00   [runAsRootAllowed cpuRequestsMissing memoryRequestsMissing readinessProbeMissing livenessProbeMissing memoryLimitsMissing cpuLimitsMissing notReadOnlyRootFilesystem priorityClassNotSet]
        istio-system                   Warning    istio-telemetry                                               Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem runAsRootAllowed pullPolicyNotAlways readinessProbeMissing priorityClassNotSet]
        kubesphere-alerting-system     Warning    alerting-executor                                             Deployment            2021-01-20T09:21:02+08:00   [notReadOnlyRootFilesystem livenessProbeMissing readinessProbeMissing runAsRootAllowed pullPolicyNotAlways priorityClassNotSet]

          trdc 代理去掉之后可能还需要重启所有的pod。

          1. 用Kubectl get pod -A 获取一下所有的pod,检查一下有没有异常的。
          2. 如果还是偶尔不能访问的话,还是需要检查浏览器->Master->ks-console链路的网络连接问题
          • trdc 回复了此帖
            5 天 后

            RolandMa1986 多谢大神,去掉代理后kubectl命令好使了,不过浏览器访问还是时断时续

            将服务ks-console的外部流量策略externalTrafficPolicy由Cluster改为Local,解决了访问时断时续的问题,留下个疑问,就是为什么Cluster模式的外部流量策略会出现时断时续的问题呢