Kubernetes删除资源后持续terminating状态

Error from server (Forbidden): error when creating "/root/istio.yaml": configmaps "istio-galley-configuration" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": configmaps "prometheus" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": configmaps "istio-security-custom-resources" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": configmaps "istio" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": configmaps "istio-sidecar-injector" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-galley-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-egressgateway-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-ingressgateway-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-mixer-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-pilot-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "prometheus" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-cleanup-secrets-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": jobs.batch "istio-cleanup-secrets-master-latest-daily" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-security-post-install-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": jobs.batch "istio-security-post-install-master-latest-daily" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-citadel-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": serviceaccounts "istio-sidecar-injector-service-account" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-galley" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-egressgateway" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-ingressgateway" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-policy" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-telemetry" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-pilot" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "prometheus" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-citadel" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": services "istio-sidecar-injector" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-galley" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-egressgateway" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-ingressgateway" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-policy" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-telemetry" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-pilot" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "prometheus" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-citadel" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": deployments.extensions "istio-sidecar-injector" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": horizontalpodautoscalers.autoscaling "istio-egressgateway" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": horizontalpodautoscalers.autoscaling "istio-ingressgateway" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": horizontalpodautoscalers.autoscaling "istio-policy" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": horizontalpodautoscalers.autoscaling "istio-telemetry" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": horizontalpodautoscalers.autoscaling "istio-pilot" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": attributemanifests.config.istio.io "istioproxy" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": attributemanifests.config.istio.io "kubernetes" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": handlers.config.istio.io "stdio" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": logentries.config.istio.io "accesslog" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": logentries.config.istio.io "tcpaccesslog" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "stdio" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "stdiotcp" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "requestcount" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "requestduration" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "requestsize" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "responsesize" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "tcpbytesent" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "tcpbytereceived" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "tcpconnectionsopened" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": metrics.config.istio.io "tcpconnectionsclosed" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": handlers.config.istio.io "prometheus" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "promhttp" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "promtcp" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "promtcpconnectionopen" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "promtcpconnectionclosed" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": handlers.config.istio.io "kubernetesenv" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "kubeattrgenrulerule" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": rules.config.istio.io "tcpkubeattrgenrulerule" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": kuberneteses.config.istio.io "attributes" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": destinationrules.networking.istio.io "istio-policy" is forbidden: unable to create new content in namespace istio-system because it is being terminated
Error from server (Forbidden): error when creating "/root/istio.yaml": destinationrules.networking.istio.io "istio-telemetry" is forbidden: unable to create new content in namespace istio-system because it is being terminated
[root@master1 ~]# kubectl get po -n istio-system
NAME READY STATUS RESTARTS AGE
istio-policy-6ccddfd88c-b9jrm 1/2 Terminating 9 4h47m
istio-policy-6ccddfd88c-njnq5 1/2 Terminating 9 4h47m
istio-policy-6ccddfd88c-pwr97 2/2 Terminating 20 5h18m
istio-telemetry-8bf65698d-cstxv 1/2 Terminating 15 5h3m
istio-telemetry-8bf65698d-d5v6n 1/2 Terminating 7 4h44m
istio-telemetry-8bf65698d-nj474 1/2 Terminating 17 5h12m
[root@master1 ~]# kubectl delete po -n istio-system istio-policy-6ccddfd88c-b9jrm --grace-period= 0 --force
warning: Immediate deletion does not wait for confirmation that the running resource has been ter minated. The resource may continue to run on the cluster indefinitely.
pod "istio-policy-6ccddfd88c-b9jrm" force deleted
[root@master1 ~]# kubectl delete po -n istio-system istio-policy-6ccddfd88c-njnq5 --grace-period= 0 --force
warning: Immediate deletion does not wait for confirmation that the running resource has been ter minated. The resource may continue to run on the cluster indefinitely.
pod "istio-policy-6ccddfd88c-njnq5" force deleted
[root@master1 ~]# kubectl delete po -n istio-system istio-policy-6ccddfd88c-pwr97 --grace-period= 0 --force
warning: Immediate deletion does not wait for confirmation that the running resource has been ter minated. The resource may continue to run on the cluster indefinitely.
pod "istio-policy-6ccddfd88c-pwr97" force deleted
[root@master1 ~]# kubectl delete po -n istio-system istio-telemetry-8bf65698d-cstxv --grace-perio d=0 --force
warning: Immediate deletion does not wait for confirmation that the running resource has been ter minated. The resource may continue to run on the cluster indefinitely.
pod "istio-telemetry-8bf65698d-cstxv" force deleted
[root@master1 ~]# kubectl delete po -n istio-system istio-telemetry-8bf65698d-d5v6n --grace-perio d=0 --force
warning: Immediate deletion does not wait for confirmation that the running resource has been ter minated. The resource may continue to run on the cluster indefinitely.
pod "istio-telemetry-8bf65698d-d5v6n" force deleted
[root@master1 ~]# kubectl delete po -n istio-system istio-telemetry-8bf65698d-nj474 --grace-perio d=0 --force
warning: Immediate deletion does not wait for confirmation that the running resource has been ter minated. The resource may continue to run on the cluster indefinitely.
pod "istio-telemetry-8bf65698d-nj474" force deleted

原文地址:http://blog.51cto.com/lizhiyuan/2346971

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。

相关推荐


istio的授权功能,也称为基于角色的访问控制(RBAC),它为istio服务网格中的服务提供命名空间级别、服务级别和方法级别的访问控制。基于角色的访问控制具有简单易用、灵活和高性能等特性。本文介绍如何在服务网格中为服务进行授权控制。·前置条件·•安装istio的k8s集群,启用认证功能、
Errorfromserver(Forbidden):errorwhencreating"oot/istio.yaml":configmaps"istio-galley-configuration"isforbidden:unabletocreatenewcontentinnamespaceistio-systembecauseitisbeingterminatedErrorfromserver(Forbid
3.1Istio的核心组件及其功能Istio总体分两部分:控制面和数据面。数据面(sidecar):sidecar通过注入的方式和业务容器共存于一个pod,会劫持业务容器的流量,并接受控制面组件的控制,同时会向控制面输出日志、跟踪以及监控数据。控制面:Istio的核心,管理Istio的所有功能。
在Istio中,双向TLS是传输身份验证的完整堆栈解决方案,它为每个服务提供可跨集群的强大身份、保护服务到服务通信和最终用户到服务通信,以及提供密钥管理系统。本文阐述如何在不中断通信的情况下,把现存Istio服务的流量从明文升级为双向TLS。使用场景 在部署了Istio的集群中,使用人员
在之前的最佳实践中,已经带大家通过一系列的实践任务领略了Istio的无穷魅力。今天,将向大家介绍如何用Istio实现流量熔断。熔断机制是创建弹性微服务应用程序的重要模式。熔断可以帮助您自由控制故障影响的范围、网络延迟的峰值以及抵御其他一些来自外部的恶意***等场景。在接下来
流量镜像流量镜像,也称为影子流量,流量镜像提供一种尽可能低的风险为生产带来变化的强大功能。镜像会将实时流量的副本发送到镜像服务。镜像流量发生在主服务的关键请求路径之外。在非生产或者测试环境中,尝试访问一个服务所有可能的测试用例组合是个非常不现实的任务。在某些情况下
一、负载均衡算法原理与实战负载均衡算法(loadbalancingalgorithm),定义了几种基本的流量分发方式,在Istio中一共有4种标准负载均衡算法。•Round_Robin:轮询算法,顾名思义请求将会依次发给每一个实例,来共同分担所有的请求。•Random:随机算法,将所有的请求随机分发给健康的实例•
本文整理自华为CloudBU技术专家在K8S技术社上关于Istio调用链的分享。前言大家好,我是idouba,来自华为CloudBU,当前在做Istio服务网格在华为云容器服务的产品化工作。今天跟大家分享的主题是Istio调用链相关内容。通过剖析Istio的架构机制与Istio中调用链的工作原理来解答一个大
今天,我们就来谈谈Istio主打功能---保护服务。那么,便引出3个问题:Istio凭什么保护服务?Istio具体如何保护服务?如何告诉Istio发挥保护能力?Istio凭什么保护服务?将单体应用程序分解为一个个服务,为大型软件系统的开发和维护带来了诸多好处,比如更好的灵活性、可伸缩性和可复用性
istio-opentracing链路追踪方案istio-opentracing链路追踪主要是由sidecar(envoy)支持的,istio只是在上层进行配置的修改。envoy链路追踪envoy主要用三个功能来支撑系统范围内的跟踪生成RequestID:envoy会在需要的时候生成UUID,并操作名为[x-request-id]的HTTPHeader。应用可
在前面的文章中,大家都已经熟悉了Istio的故障注入和流量迁移。这两个方面的功能都是Istio流量治理的一部分。今天将继续带大家了解Istio的另一项功能,关于请求超时的管理。首先我们可以通过一个简单的Bookinfo的微服务应用程序来动手实践一下Istio是如何实现请求超时的管理。看过ido
调用链原理和场景正如ServiceMesh的诞生是为了解决大规模分布式服务访问的治理问题,调用链的出现也是为了对应于大规模的复杂的分布式系统运行中碰到的故障定位定界问题。大量的服务调用、跨进程、跨服务器,可能还会跨多个物理机房。无论是服务自身问题还是网络环境的问题导致调用
在Istio中,双向TLS是传输身份验证的完整堆栈解决方案,它为每个服务提供可跨集群的强大身份、保护服务到服务通信和最终用户到服务通信,以及提供密钥管理系统。本文阐述如何在不中断通信的情况下,把现存Istio服务的流量从明文升级为双向TLS。使用场景在部署了Istio的集群中,使用人员刚
前言在Istio的世界里,如果想把外部的请求流量引入网格,你需要认识并会学会配置IstioIngressGateway什么是IngressGateway由于KubernetesIngressAPI只能支持最基本的HTTP路由,使用KubernetesIngress资源来配置外部流量的方式不能满足需求。因此Istiov1alpha3routingAPI引
Istio是什么?使用云平台可以为组织提供丰富的好处。然而,不可否认的是,采用云可能会给DevOps团队带来压力。开发人员必须使用微服务已满足应用的可移植性,同时运营商管理了极其庞大的混合和多云部署。Istio允许您连接、保护、控制和观测服务。在较高的层次上,Istio有助于降低这些
Istio利用k8s的探针对service进行流量健康检查,有两种探针可供选择,分别是liveness和readiness:liveness探针用来侦测什么时候需要重启容器。比如说当liveness探针捕获到程序运行时出现的一个死锁,这种情况下重启容器可以让程序更容易可用。readiness探针用来使容器准备好接收流量。
摘要使用Istio可以很方便地实现微服务间的访问控制。本文演示了使用Denier适配器实现拒绝访问,和Listchecker适配器实现黑白名单两种方法。使用场景有时需要对微服务间的相互访问进行控制,比如使满足某些条件(比如版本)的微服务能够(或不能)调用特定的微服务。访问控制属于策略
导读目前以Kubernetes为基础构建的容器生态逐渐完善,这其中Kubernetes、Istio、Knative三个独立项目被越来越多的人提及,并且已经开始尝试大规模落地实践,它们恰好构成了容器云的未来拼图。今天与大家一起分享下,这三个项目究竟解决了什么问题,为什么它们能够一鸣惊人。随着微服务理念
注:以下讲述的按理环境场景是基于Kubernetes环境基础上部署的Istio环境。涉及到Envoy概念介绍请参考深度解析Istio系列之流量控制篇。本文重点针对Envoy初始化场景进行拆解。Istio-proxy(Envoy)作为Istio数据平面的重要组件,基于sidecar方式与业务应用混合部署到同一pod,为应用提
使用云平台可以为组织提供丰富的好处。然而,不可否认的是,采用云可能会给DevOps团队带来压力。开发人员必须使用微服务以满足应用的可移植性,同时运营商管理了极其庞大的混合和多云部署。Istio允许您连接、保护、控制和观测服务。在较高的层次上,Istio有助于降低这些部署的复杂性,