istio-ingressgateway总是等待Istio引导信息

Question

我正在尝试在和OVH managed k8 cluster上部署kubeflow。

在初始设置k8集群之后，我按照建议的here运行以下命令来安装kubeflow

# install
snap install juju --classic

# get cluster name (should be data-workflow)
# check using `cat ~/.kube/config` 
juju add-k8s data-workflow

# create a controller
juju bootstrap data-workflow tp-controller

# add the model
juju add-model kubeflow

# deploy kubeflow
juju deploy cs:kubeflow

# set url in authentication methods
juju config dex-auth public-url=http://foo.k8s.ovh.net
juju config oidc-gatekeeper public-url=http://foo.k8s.ovh.net

我看到istio-ingress的魅力总是在等待-这是正常的吗？我怎么才能启动它呢？

$ juju status
Model     Controller     Cloud/Region   Version  SLA          Timestamp
kubeflow  tp-controller  data-workflow  2.9.3    unsupported  12:18:03+02:00

App                        Version                    Status   Scale  Charm                 Store       Channel  Rev  OS          Address       Message
... 
istio-ingressgateway                                  waiting      1  istio-ingressgateway  charmstore  stable    20  kubernetes                Waiting for Istio Pilot information
...

Unit                          Workload  Agent  Address    Ports                                   Message
...                             
istio-ingressgateway/0*       waiting   idle                                                      Waiting for Istio Pilot information
...

Answer 1

这看起来像是个bug。令人难以置信的是，在video中(在6:40)提到了它，但在docs中却没有(在同一页上)。它实际上也没有写在视频描述的任何地方。精彩的。

您需要在安装了kubectl的机器上打开一个终端，然后运行：

kubectl patch role -n kubeflow istio-ingressgateway-operator -p '{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"Role","metadata":{"name":"istio-ingressgateway-operator"},"rules":[{"apiGroups":["*"],"resources":["*"],"verbs":["*"]}]}'

istio-ingressgateway服务将在几分钟后启动。