istio 1.5使用kubectl创建资源,istio-token not found
source link: https://blog.csdn.net/oqqYuan1234567890/article/details/105452102
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
由于内网环境隔离的问题,需要改动部分部署参数。所以使用istioctl生成了manifest文件,但是部署异常,describe pod之后,发现有一些资源例如istio-token not found,去github搜了一下issue,看到好几个issue都有提及相关的问题
https://github.com/istio/istio/issues/21968
https://github.com/istio/istio/issues/22806
参考issue提及的指引
https://istio.io/docs/ops/best-practices/security/#configure-third-party-service-account-tokens
$ istioctl manifest generate --set profile=demo --set values.global.jwtPolicy=first-party-jwtm > demo.yaml
然后create -f资源
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK