3.1.0部署的
2021-11-10T09:11:17.315148Z info Envoy command: [-c etc/istio/proxy/envoy-rev0.json --restart-epoch 0 --drain-time-s 45 --parent-shutdown-time-s 60 --service-cluster istio-ingressgateway --service-node router~10.233.117.32~istio-ingressgateway-974bc94b8-snsw5.istio-system~istio-system.svc.cluster.local --max-obj-name-len 189 --local-address-ip-version v4 --log-format %Y-%m-%dT%T.%fZ %l envoy %n %v -l warning --component-log-level misc:error]
2021-11-10T09:11:17.395646Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:92] StreamAggregatedResources gRPC config stream closed: 14, no healthy upstream
2021-11-10T09:11:17.395704Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:54] Unable to establish new stream
2021-11-10T09:11:17.404156Z warning envoy main [external/envoy/source/server/server.cc:475] there is no configured limit to the number of allowed active connections. Set a limit via the runtime key overload.global_downstream_max_connections
2021-11-10T09:11:17.407598Z info sds resource:default new connection
2021-11-10T09:11:17.407692Z info sds Skipping waiting for ingress gateway secret
2021-11-10T09:11:17.614086Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:92] StreamAggregatedResources gRPC config stream closed: 14, no healthy upstream
2021-11-10T09:11:17.614128Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:54] Unable to establish new stream
2021-11-10T09:11:19.460562Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:92] StreamAggregatedResources gRPC config stream closed: 14, no healthy upstream
2021-11-10T09:11:19.460598Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:54] Unable to establish new stream
2021-11-10T09:11:26.662356Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:92] StreamAggregatedResources gRPC config stream closed: 14, no healthy upstream
2021-11-10T09:11:26.662391Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:54] Unable to establish new stream
2021-11-10T09:11:37.209300Z warning envoy config [bazel-out/k8-opt/bin/external/envoy/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:92] StreamSecrets gRPC config stream closed: 14, connection error: desc = "transport: authentication handshake failed: context deadline exceeded"
2021-11-10T09:11:37.208808Z info grpc: addrConn.createTransport failed to connect to {istiod-1-6-10.istio-system.svc:15012 <nil> 0 <nil>}. Err: connection error: desc = "transport: authentication handshake failed: context deadline exceeded". Reconnecting...
2021-11-10T09:11:37.208847Z info Subchannel Connectivity change to TRANSIENT_FAILURE
2021-11-10T09:11:37.208923Z info pickfirstBalancer: HandleSubConnStateChange: 0xc000c66ea0, {TRANSIENT_FAILURE connection error: desc = "transport: authentication handshake failed: context deadline exceeded"}
2021-11-10T09:11:37.208932Z info Channel Connectivity change to TRANSIENT_FAILURE
2021-11-10T09:11:37.208966Z error citadelclient Failed to create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: context deadline exceeded"
2021-11-10T09:11:37.208976Z error cache resource:default request:73c3e154-044b-418f-8504-5e644e20738c CSR retrial timed out: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: context deadline exceeded"
2021-11-10T09:11:37.209001Z error cache resource:default failed to generate secret for proxy: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: context deadline exceeded"
2021-11-10T09:11:37.209013Z error sds resource:default Close connection. Failed to get secret for proxy "router~10.233.117.32~istio-ingressgateway-974bc94b8-snsw5.istio-system~istio-system.svc.cluster.local" from secret cache: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: context deadline exceeded"
过一段时间之后,istiod就没显示了,在可视化界面里显示关闭状态,istio-ingress依然起不来
NAME READY STATUS RESTARTS AGE
istio-ingressgateway-974bc94b8-lskp5 0/1 Running 0 26m
jaeger-collector-59d498d557-kzhvc 1/1 Running 0 58s
jaeger-operator-677c7bc669-47vkp 1/1 Running 0 6m
jaeger-query-79c7676c86-zc9xt 2/2 Running 0 5m48s
kiali-5c547b7584-cfkxm 1/1 Running 0 5m21s
kiali-operator-6db4ccbf94-csl58 1/1 Running 0 5m58s`
有遇到过这种问题的小伙伴吗,望大神给个思路