我试图在GKE上使用证书管理器运行helloworld-go示例。
我安装了Istio没有侧加注入,证书管理器0.11和安装自动SSL和DNS.当我运行kubectl get ksvc
时,它会显示IngressNotConfigured
。知道为什么吗?
$ kubectl get ksvc
NAME URL LATESTCREATED LATESTREADY READY REASON
helloworld-go https://helloworld-go.default.redhost.cloud helloworld-go-mc27h helloworld-go-mc27h Unknown IngressNotConfigured
$ kubectl describe ksvc helloworld-go
Status:
Address:
URL: http://helloworld-go.default.svc.cluster.local
Conditions:
Last Transition Time: 2019-11-26T15:19:51Z
Status: True
Type: ConfigurationsReady
Last Transition Time: 2019-11-26T15:31:25Z
Message: Ingress has not yet been reconciled.
Reason: IngressNotConfigured
Status: Unknown
Type: Ready
Last Transition Time: 2019-11-26T15:31:25Z
Message: Ingress has not yet been reconciled.
Reason: IngressNotConfigured
Status: Unknown
Type: RoutesReady
Latest Created Revision Name: helloworld-go-mc27h
Latest Ready Revision Name: helloworld-go-mc27h
Observed Generation: 1
Traffic:
Latest Revision: true
Percent: 100
Revision Name: helloworld-go-mc27h
URL: https://helloworld-go.default.redhost.cloud
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Created 23m service-controller Created Configuration "helloworld-go"
Normal Created 23m service-controller Created Route "helloworld-go"
Normal Updated 11m (x7 over 23m) service-controller Updated Service "helloworld-go"
添加标签serving.knative.dev/visibility=cluster-local
会使问题消失,但只有在没有SSL的情况下才能在内部访问。
发布于 2019-11-27 00:52:42
问题是我已经安装了常规的Istio,在那里您特别需要带有SDS的Istio。https://knative.dev/docs/serving/using-auto-tls/
此外,要确保使用cert-manager 0.10.0,因为当前不支持0.11.0。https://github.com/knative/serving/issues/6011
一旦我做了这些,一切都成功了:
NAME URL LATESTCREATED LATESTREADY READY REASON
helloworld-go https://helloworld-go.default.redhost.cloud helloworld-go-mc27h helloworld-go-mc27h True```
https://stackoverflow.com/questions/59054617
复制相似问题