istio-ingressgateway 总是等待 Istio Pilot 信息

Question

我正在尝试在 OVH managed k8 cluster 上部署 kubeflow。

在 k8 集群的初始设置之后，我运行了以下命令来安装 kubeflow，正如 here 所建议的那样：

# install
snap install juju --classic

# get cluster name (should be data-workflow)
# check using `cat ~/.kube/config` 
juju add-k8s data-workflow

# create a controller
juju bootstrap data-workflow tp-controller

# add the model
juju add-model kubeflow

# deploy kubeflow
juju deploy cs:kubeflow

# set url in authentication methods
juju config dex-auth public-url=http://foo.k8s.ovh.net
juju config oidc-gatekeeper public-url=http://foo.k8s.ovh.net

我看到istio-ingress 的魅力总是在等待——这正常吗？我怎样才能开始呢？

$ juju status
Model     Controller     Cloud/Region   Version  SLA          Timestamp
kubeflow  tp-controller  data-workflow  2.9.3    unsupported  12:18:03+02:00

App                        Version                    Status   Scale  Charm                 Store       Channel  Rev  OS          Address       Message
... 
istio-ingressgateway                                  waiting      1  istio-ingressgateway  charmstore  stable    20  kubernetes                Waiting for Istio Pilot information
...

Unit                          Workload  Agent  Address    Ports                                   Message
...                             
istio-ingressgateway/0*       waiting   idle                                                      Waiting for Istio Pilot information
...

Answer 1

这似乎是一个错误。令人难以置信的是，video（6:40）中提到了它，但docs（在同一页上）中没有提到。它实际上也没有写在视频描述的任何地方。太棒了。

你需要在安装了kubectl的机器上打开一个终端，然后运行：

kubectl patch role -n kubeflow istio-ingressgateway-operator -p '{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"Role","metadata":{"name":"istio-ingressgateway-operator"},"rules":[{"apiGroups":["*"],"resources":["*"],"verbs":["*"]}]}'

istio-ingressgateway 服务将在几分钟后启动。