2

istio 1.5使用kubectl创建资源,istio-token not found

 3 years ago
source link: https://blog.csdn.net/oqqYuan1234567890/article/details/105452102
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

istio 1.5使用kubectl创建资源,istio-token not found

original.png
皿小草 2020-04-11 14:26:56 articleReadEyes.png 491

由于内网环境隔离的问题,需要改动部分部署参数。所以使用istioctl生成了manifest文件,但是部署异常,describe pod之后,发现有一些资源例如istio-token not found,去github搜了一下issue,看到好几个issue都有提及相关的问题

https://github.com/istio/istio/issues/21968
https://github.com/istio/istio/issues/22806

参考issue提及的指引
https://istio.io/docs/ops/best-practices/security/#configure-third-party-service-account-tokens

$ istioctl manifest generate  --set profile=demo  --set values.global.jwtPolicy=first-party-jwtm > demo.yaml

然后create -f资源


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK