kubectl get全命令返回节流请求

Question

运行kubectl get all返回限制请求错误

如何调试和修复此问题？

I0223 10:28:04.717522   44883 request.go:655] Throttling request took 1.1688991s, request: GET:https://192.168.64.2:8443/apis/apps/v1?timeout=32s
I0223 10:28:14.913541   44883 request.go:655] Throttling request took 5.79656704s, request: GET:https://192.168.64.2:8443/apis/authorization.k8s.io/v1?timeout=32s
I0223 10:28:24.914386   44883 request.go:655] Throttling request took 7.394979677s, request: GET:https://192.168.64.2:8443/apis/cert-manager.io/v1alpha2?timeout=32s
I0223 10:28:35.513643   44883 request.go:655] Throttling request took 1.196992376s, request: GET:https://192.168.64.2:8443/api/v1?timeout=32s
I0223 10:28:45.516586   44883 request.go:655] Throttling request took 2.79962307s, request: GET:https://192.168.64.2:8443/apis/rbac.authorization.k8s.io/v1?timeout=32s
I0223 10:28:55.716699   44883 request.go:655] Throttling request took 4.600430975s, request: GET:https://192.168.64.2:8443/apis/node.k8s.io/v1beta1?timeout=32s
I0223 10:29:05.717707   44883 request.go:655] Throttling request took 6.196503125s, request: GET:https://192.168.64.2:8443/apis/storage.k8s.io/v1?timeout=32s
I0223 10:29:15.914744   44883 request.go:655] Throttling request took 7.99827047s, request: GET:https://192.168.64.2:8443/apis/acme.cert-manager.io/v1alpha2?timeout=32s

Answer 1

要诊断kubectl命令，请在运行该命令时选择一个详细级别。如果你运行kubectl -v=9，你会得到大量的调试输出。

如果你查看那里，你可能会发现.kube中缓存目录的权限是无效的。

I0511 09:28:13.431116  260204 cached_discovery.go:87] failed to write cache to /home/$USER/.kube/cache/discovery/CLUSTER_NAME/security.istio.io/v1beta1/serverresources.json due to mkdir /home/$USER/.kube/cache/discovery: permission denied

要解决这个问题，我只需设置允许写入缓存数据的权限。

chmod 755 -R ~/.kube/cache

这解决了我的问题--希望它能帮助其他人。

Answer 2

根据Red Hat的说法，“由于安装在RHOCP集群中的自定义资源定义(CRD)的数量不断增加，到达API发现的请求受到客户端代码的限制。”

我的OpenShift集群上有很多CRD，我观察到了这个问题。在您的Kubernetes集群上是这样吗？

更新kubectl版本对我很有效。