创建部署问题时，请参考下面模板，你提供的信息越多，越容易及时获得解答。如果未按模板创建问题，管理员有权关闭问题。
确保帖子格式清晰易读，用 markdown code block 语法格式化代码块。
你只花一分钟创建的问题，不能指望别人花上半个小时给你解答。
操作系统信息
例如：虚拟机/物理机，Centos7.5/Ubuntu18.04，4C/8G
Kubernetes版本信息
将 kubectl version 命令执行结果贴在下方
Client Version: version.Info{Major:“1”, Minor:“21”, GitVersion:“v1.21.5”, GitCommit:“aea7bbadd2fc0cd689de94a54e5b7b758869d691”, GitTreeState:“clean”, BuildDate:“2021-09-15T21:10:45Z”, GoVersion:“go1.16.8”, Compiler:“gc”, Platform:“linux/amd64”}
Server Version: version.Info{Major:“1”, Minor:“21”, GitVersion:“v1.21.5”, GitCommit:“aea7bbadd2fc0cd689de94a54e5b7b758869d691”, GitTreeState:“clean”, BuildDate:“2021-09-15T21:04:16Z”, GoVersion:“go1.16.8”, Compiler:“gc”, Platform:“linux/amd64”}
容器运行时
将 docker version / crictl version / nerdctl version 结果贴在下方
Client: Docker Engine - Community
Version: 20.10.10
KubeSphere版本信息
例如：v2.1.1/v3.0.0。离线安装还是在线安装。在已有K8s上安装还是使用kk安装。
v3.2.0，使用kk安装
问题是什么
报错日志是什么，最好有截图。
边缘端能够加入kubeedge，但是从云端部署应用时，一直无法部署，容器等待中
cloudcore报错
W1118 18:10:59.812516 1 validation.go:168] TLSTunnelPrivateKeyFile does not exist in /etc/kubeedge/certs/server.key, will load from secret
W1118 18:10:59.812568 1 validation.go:171] TLSTunnelCertFile does not exist in /etc/kubeedge/certs/server.crt, will load from secret
W1118 18:10:59.812578 1 validation.go:174] TLSTunnelCAFile does not exist in /etc/kubeedge/ca/rootCA.crt, will load from secret
I1118 18:10:59.812763 1 server.go:73] Version: v1.7.2
W1118 18:10:59.812784 1 client_config.go:608] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work.
I1118 18:11:00.831061 1 module.go:34] Module cloudhub registered successfully
I1118 18:11:00.902750 1 module.go:34] Module edgecontroller registered successfully
I1118 18:11:00.902810 1 module.go:34] Module devicecontroller registered successfully
I1118 18:11:00.902838 1 module.go:34] Module synccontroller registered successfully
I1118 18:11:00.902877 1 module.go:34] Module cloudStream registered successfully
W1118 18:11:00.902888 1 module.go:37] Module router is disabled, do not register
W1118 18:11:00.902893 1 module.go:37] Module dynamiccontroller is disabled, do not register
I1118 18:11:00.902948 1 core.go:24] Starting module synccontroller
I1118 18:11:00.902985 1 core.go:24] Starting module cloudStream
I1118 18:11:00.903050 1 core.go:24] Starting module cloudhub
I1118 18:11:00.903099 1 core.go:24] Starting module edgecontroller
I1118 18:11:00.903122 1 core.go:24] Starting module devicecontroller
I1118 18:11:00.904058 1 upstream.go:121] start upstream controller
I1118 18:11:00.904506 1 downstream.go:870] Start downstream devicecontroller
I1118 18:11:00.906086 1 downstream.go:566] start downstream controller
I1118 18:11:01.006570 1 server.go:243] Ca and CaKey don't exist in local directory, and will read from the secret
I1118 18:11:01.099920 1 server.go:247] Ca and CaKey don't exist in the secret, and will be created by CloudCore
I1118 18:11:01.205814 1 server.go:288] CloudCoreCert and key don't exist in local directory, and will read from the secret
I1118 18:11:01.208342 1 server.go:292] CloudCoreCert and key don't exist in the secret, and will be signed by CA
I1118 18:11:01.213518 1 streamserver.go:280] Prepare to start stream server ...
I1118 18:11:01.213885 1 tunnelserver.go:136] Succeed in loading TunnelCA from CloudHub
I1118 18:11:01.213990 1 tunnelserver.go:149] Succeed in loading TunnelCert and Key from CloudHub
I1118 18:11:01.214098 1 tunnelserver.go:169] Prepare to start tunnel server ...
I1118 18:11:01.299207 1 signcerts.go:100] Succeed to creating token
I1118 18:11:01.299260 1 server.go:44] start unix domain socket server
I1118 18:11:01.299569 1 server.go:64] Starting cloudhub websocket server
I1118 18:11:01.299959 1 uds.go:71] listening on: //var/lib/kubeedge/kubeedge.sock
I1118 18:11:02.904747 1 upstream.go:63] Start upstream devicecontroller
I1118 18:17:15.782158 1 messagehandler.go:293] edge node edgenode-quse for project e632aba927ea4ac2b575ec1603d56f10 connected
W1118 18:17:15.782205 1 upstream.go:204] parse message: 9a10a462-219a-4c74-a0c9-5b2a8d1ecce1 resource type with error: resource type not found
I1118 18:17:15.791666 1 upstream.go:88] Dispatch message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44
W1118 18:17:15.791681 1 upstream.go:92] Parse message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44 resource type with error: unknown resource
W1118 18:17:16.388025 1 upstream.go:807] message: ca644754-f1e5-4c1b-a225-0a12b5e04818 process failure, node edgenode-quse not found
I1118 18:17:17.780881 1 tunnelserver.go:110] get a new tunnel agent hostname edgenode-quse, internalIP 10.62.131.99
I1118 18:19:15.609009 1 upstream.go:88] Dispatch message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44
W1118 18:19:15.609046 1 upstream.go:92] Parse message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44 resource type with error: unknown resource
E1118 18:20:07.755218 1 upstream.go:728] apiserver get service account token failed: err serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "demo-project"
W1118 18:31:23.655126 1 upstream.go:627] message: 1c50878b-6a27-4a19-8625-3d625c820120 process failure with error: serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "demo-project", namespace: demo-project, name: default
I1118 18:32:15.628048 1 upstream.go:88] Dispatch message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44
W1118 18:32:15.628065 1 upstream.go:92] Parse message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44 resource type with error: unknown resource
I1118 18:33:15.623118 1 upstream.go:88] Dispatch message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44
W1118 18:33:15.623148 1 upstream.go:92] Parse message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44 resource type with error: unknown resource
E1118 18:33:16.082998 1 upstream.go:728] apiserver get service account token failed: err serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default"
W1118 18:33:16.083018 1 upstream.go:627] message: 8521dccd-d9ca-4e64-b63e-f1b4cebfb9fd process failure with error: serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default", namespace: default, name: default
E1118 18:34:16.086466 1 upstream.go:728] apiserver get service account token failed: err serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default"
W1118 18:34:16.086484 1 upstream.go:627] message: 90f171a5-2a8e-4496-ba2d-a0e645034059 process failure with error: serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default", namespace: default, name: default
I1118 18:35:15.632674 1 upstream.go:88] Dispatch message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44
W1118 18:35:15.632693 1 upstream.go:92] Parse message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44 resource type with error: unknown resource
E1118 18:35:16.662692 1 upstream.go:728] apiserver get service account token failed: err serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default"
W1118 18:35:16.662731 1 upstream.go:627] message: 7ee303e4-61dc-410d-a038-e6e91ff2fe9f process failure with error: serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default", namespace: default, name: default
I1118 18:36:15.635483 1 upstream.go:88] Dispatch message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44
W1118 18:36:15.635520 1 upstream.go:92] Parse message: 5710c66e-2d2a-4c89-b4bc-790cbc6b5b44 resource type with error: unknown resource
E1118 18:36:16.664455 1 upstream.go:728] apiserver get service account token failed: err serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default"
W1118 18:36:16.664476 1 upstream.go:627] message: cf910c1f-7b0d-4360-82c6-c4c6a3f0e47f process failure with error: serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default", namespace: default, name: default
E1118 18:37:17.761339 1 upstream.go:728] apiserver get service account token failed: err serviceaccounts "default" is forbidden: User "system:serviceaccount:kubeedge:cloudcore" cannot create resource "serviceaccounts/token" in API group "" in the namespace "default"
边缘端报错如下：
Nov 18 18:53:23 raspberrypi edgecore[7366]: E1118 18:53:23.518909 7366 metaclient.go:130] send sync message default/serviceaccounttoken/default failed, error:timeout to get response, retries: 2
Nov 18 18:53:23 raspberrypi edgecore[7366]: E1118 18:53:23.519065 7366 serviceaccount.go:41] get service account token from metaManager failed, err: timed out waiting for the condition
Nov 18 18:53:23 raspberrypi edgecore[7366]: I1118 18:53:23.519629 7366 process.go:470] ########## process get: req[{Header:{ID:6e507d0d-9e8e-4803-8e20-95b9db5e8198 ParentID: Timestamp:1637232683507 ResourceVersion: Sync:true} Router:{Source:edged Group:meta Operation:query Resource:default/serviceaccounttoken/default} Content:&TokenRequest{ObjectMeta:{ 0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},Spec:TokenRequestSpec{Audiences:[],BoundObjectRef:&BoundObjectReference{Kind:Pod,APIVersion:v1,Name:nginx-cfccdd6bb-dkqgx,UID:bb63e2fc-f241-4fd6-a59d-5ec338c2f818,},ExpirationSeconds:*3607,},Status:TokenRequestStatus{Token:,ExpirationTimestamp:0001-01-01 00:00:00 +0000 UTC,},}}], resp[{Header:{ID: ParentID: Timestamp:0 ResourceVersion: Sync:false} Router:{Source: Group: Operation: Resource:} Content:<nil>}], err[timeout to get response]
Nov 18 18:53:23 raspberrypi edgecore[7366]: E1118 18:53:23.520473 7366 process.go:472] remote query failed: timeout to get response
Nov 18 18:53:23 raspberrypi edgecore[7366]: E1118 18:53:23.531681 7366 projected.go:201] Error preparing data for projected volume kube-api-access-9wsv8 for pod default/nginx-cfccdd6bb-dkqgx: get service account token from metaManager failed, err: timed out waiting for the condition
Nov 18 18:53:23 raspberrypi edgecore[7366]: I1118 18:53:23.531990 7366 record.go:24] Warning FailedMount MountVolume.SetUp failed for volume "kube-api-access-9wsv8" : get service account token from metaManager failed, err: timed out waiting for the condition
Nov 18 18:53:23 raspberrypi edgecore[7366]: E1118 18:53:23.532349 7366 nestedpendingoperations.go:301] Operation for "{volumeName:kubernetes.io/projected/bb63e2fc-f241-4fd6-a59d-5ec338c2f818-kube-api-access-9wsv8 podName:bb63e2fc-f241-4fd6-a59d-5ec338c2f818 nodeName:}" failed. No retries permitted until 2021-11-18 18:55:25.532091639 +0800 CST m=+2291.984650194 (durationBeforeRetry 2m2s). Error: "MountVolume.SetUp failed for volume \"kube-api-access-9wsv8\" (UniqueName: \"kubernetes.io/projected/bb63e2fc-f241-4fd6-a59d-5ec338c2f818-kube-api-access-9wsv8\") pod \"nginx-cfccdd6bb-dkqgx\" (UID: \"bb63e2fc-f241-4fd6-a59d-5ec338c2f818\") : get service account token from metaManager failed, err: timed out waiting for the condition"
请高人帮助解决
