I am getting below error in istio-ingress pods.
我在istio-入口舱中的误差很小。
2023-09-10T05:18:55.390302Z warn sds failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial tcp 10.100.19.43:15012: i/o timeout"
kubectl get --raw /api/v1/namespaces/istio-system/services/https:istiod:https-webhook/proxy/inject -v4
I0909 22:59:29.079159 21513 helpers.go:246] server response object: [{
"metadata": {},
"status": "Failure",
"message": "the server rejected our request for an unknown reason",
"reason": "BadRequest",
"details": {
"causes": [
{
"reason": "UnexpectedServerResponse",
"message": "no body found"
}
]
Initially I got below error,
一开始我得到了低于误差,
Error from server (ServiceUnavailable): error trying to reach service: dial tcp 172.44.30.55:15017: connect: connection timed out
I fixed this issue by adding security group inbound rules in eks node security group with source as eks cluster security group and allowing all traffic and port
我通过在源为EKS集群安全组的EKS节点安全组中添加安全组入站规则,并允许所有流量和端口,修复了此问题
But now I seeing error as below,
2023-09-10T05:18:55.390302Z warn sds failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial tcp 10.100.19.43:15012: i/o timeout"
但现在我看到错误如下:2023-09-10T05:18:55.390302Z warn SDS未能预热证书:无法生成工作负载证书:创建证书:rpc错误:代码=不可用描述=连接错误:描述=“传输:拨号时出错:拨号tcp 10.100.19.43:15012:I/O超时”
Although I have allowed all traffic from eks cluster security group to eks node security group so eks cluster can reach istiod. Not sure why I the error..
虽然我已经允许从EKS集群安全组到EKS节点安全组的所有流量,但是EKS集群可以到达istiod。不知道为什么我会犯这个错误..
更多回答
优秀答案推荐
我是一名优秀的程序员,十分优秀!