创建部署问题时,请参考下面模板,你提供的信息越多,越容易及时获得解答。如果未按模板创建问题,管理员有权关闭问题。
确保帖子格式清晰易读,用 markdown code block 语法格式化代码块。
你只花一分钟创建的问题,不能指望别人花上半个小时给你解答。
操作系统信息
虚拟机
Kubernetes版本信息
Client Version: version.Info{Major:"1", Minor:"22", GitVersion:"v1.22.1", GitCommit:"632ed300f2c34f6d6d15ca4cef3d3c7073412212", GitTreeState:"clean", BuildDate:"2021-08-19T15:45:37Z", GoVersion:"go1.16.7", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"22", GitVersion:"v1.22.8", GitCommit:"7061dbbf75f9f82e8ab21f9be7e8ffcaae8e0d44", GitTreeState:"clean", BuildDate:"2022-03-16T14:04:34Z", GoVersion:"go1.16.15", Compiler:"gc", Platform:"linux/amd64"}
容器运行时
# nerdctl version
Client:
Version: v0.7.3
Git commit: 77801f5042e05ed3cac52efbeb18aafc09795675
Server:
containerd:
Version: v1.5.5
Revision: 72cec4be58a9eb6b2910f5d10f1c01ca47d231c0
# crictl version
Version: 0.1.0
RuntimeName: containerd
RuntimeVersion: v1.5.5
RuntimeApiVersion: v1alpha2
KubeSphere版本信息
v3.2.1,已有k8s上在线安装
问题是什么
一开始集群网关不好用,然后根据issue,把kubesphere/nginx-ingress-controller版本替换成了v1.1.0
成功启动但还是报错
两个问题
issue里写还写启动ingress需要加一个参数,但肯定不能直接在kubesphere-router-kubesphere-system里改,会还原设置,这个在哪里改?
日志错误如下
2022-03-29T12:25:06.045681762+08:00 E0329 04:25:06.045502 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:25:14.314341449+08:00 E0329 04:25:14.314125 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:25:27.333143960+08:00 E0329 04:25:27.332922 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:25:38.897119547+08:00 E0329 04:25:38.896840 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:25:48.727630566+08:00 E0329 04:25:48.727439 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:26:00.893725633+08:00 E0329 04:26:00.893500 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:26:13.845855853+08:00 E0329 04:26:13.845476 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:26:23.725302777+08:00 E0329 04:26:23.725006 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:26:32.262955111+08:00 E0329 04:26:32.262765 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:26:40.089374377+08:00 E0329 04:26:40.089085 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"
2022-03-29T12:26:47.613822472+08:00 E0329 04:26:47.613587 7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader-kubesphere-router-kubesphere-system" is forbidden: User "system:serviceaccount:kubesphere-controls-system:kubesphere-router-kubesphere-system" cannot update resource "configmaps" in API group "" in the namespace "kubesphere-controls-system"