创建部署问题时,请参考下面模板:
操作系统信息,Centos8
Kubernetes版本信息,例如:v21.5。多节点。
KubeSphere版本信息,v3.2.0。离线安装。已有K8s安装
问题是什么,报错日志是什么,最好有截图。
jaeger-operator执行异常
# kubectl get pod -n istio-system
NAME READY STATUS RESTARTS AGE
istio-ingressgateway-85ff8dcf9d-v9f9q 1/1 Running 0 36m
istiod-1-11-2-d9c6b4665-jw5qs 1/1 Running 0 36m
jaeger-operator-68cbb6789c-wv6qz 1/1 Running 0 36m
kiali-6fd79676f4-6nwfr 1/1 Running 0 35m
kiali-operator-7777f47b86-v2c5x 1/1 Running 0 35m
jaeger-operator日志
# kubectl logs -n istio-system jaeger-operator-68cbb6789c-wv6qz -f
E1109 09:16:24.674161 1 reflector.go:138] pkg/mod/k8s.io/client-go@v0.20.7/tools/cache/reflector.go:167: Failed to watch *v1.Namespace: failed to list *v1.Namespace: namespaces is forbidden: User "system:serviceaccount:istio-system:jaeger-operator" cannot list resource "namespaces" in API group "" at the cluster scope
# kubectl describe role -n istio-system jaeger-operator
Name: jaeger-operator
Labels: app.kubernetes.io/instance=jaeger-operator
app.kubernetes.io/managed-by=Helm
app.kubernetes.io/name=jaeger-operator
Annotations: meta.helm.sh/release-name: jaeger-operator
meta.helm.sh/release-namespace: istio-system
PolicyRule:
Resources Non-Resource URLs Resource Names Verbs
--------- ----------------- -------------- -----
configmaps [] [] [create delete get list patch update watch]
persistentvolumeclaims [] [] [create delete get list patch update watch]
pods [] [] [create delete get list patch update watch]
secrets [] [] [create delete get list patch update watch]
serviceaccounts [] [] [create delete get list patch update watch]
services/finalizers [] [] [create delete get list patch update watch]
services [] [] [create delete get list patch update watch]
daemonsets.apps [] [] [create delete get list patch update watch]
deployments.apps [] [] [create delete get list patch update watch]
replicasets.apps [] [] [create delete get list patch update watch]
statefulsets.apps [] [] [create delete get list patch update watch]
horizontalpodautoscalers.autoscaling [] [] [create delete get list patch update watch]
cronjobs.batch [] [] [create delete get list patch update watch]
jobs.batch [] [] [create delete get list patch update watch]
consolelinks.console.openshift.io [] [] [create delete get list patch update watch]
ingresses.extensions [] [] [create delete get list patch update watch]
*.jaegertracing.io [] [] [create delete get list patch update watch]
kafkas.kafka.strimzi.io [] [] [create delete get list patch update watch]
kafkausers.kafka.strimzi.io [] [] [create delete get list patch update watch]
elasticsearches.logging.openshift.io [] [] [create delete get list patch update watch]
servicemonitors.monitoring.coreos.com [] [] [create delete get list patch update watch]
ingresses.networking.k8s.io [] [] [create delete get list patch update watch]
clusterrolebindings.rbac.authorization.k8s.io [] [] [create delete get list patch update watch]
routes.route.openshift.io [] [] [create delete get list patch update watch]
namespaces [] [] [get list watch]
deployments.apps/finalizers [] [jaeger-operator] [update]