docker - 找不到RPI Kubernetes节点上的Traefik返回404页面-6ren

docker - 找不到RPI Kubernetes节点上的Traefik返回404页面

转载作者：行者123 更新时间：2023-12-02 21:19:03

我尝试通过实践对kubernetes进行首次体验。

已在作为集群安装的5个树莓派上设置了kubernetes v1.9。

操作系统:Hypriot v1.4

主机/配置的静态ip /树莓派硬件版本:

主站:192.168.1.230 / rpi v3

node01:192.168.1.231 / rpi v3

node02:192.168.1.232 / rpi v3

node03:192.168.1.233 / rpi v2

node04:192.168.1.234 / rpi v2

对于Pod网络，我选择Weave Net。 Traefik已作为负载均衡器安装在 node01 中，以从外部访问我的服务。
我用ssh master并使用以下命令来安装它(来源: https://blog.hypriot.com/post/setup-kubernetes-raspberry-pi-cluster/):

$ kubectl apply -f https://raw.githubusercontent.com/hypriot/rpi-traefik/master/traefik-k8s-example.yaml

$ kubectl标签节点node01 nginx-controller = traefik

所有系统Pod正在运行。
$ kubectl get pods-所有命名空间

kube-system   etcd-master                                  1/1       Running   5          22h
kube-system   kube-apiserver-master                        1/1       Running   40         13h
kube-system   kube-controller-manager-master               1/1       Running   10         13h
kube-system   kube-dns-7b6ff86f69-x58pj                    3/3       Running   9          23h
kube-system   kube-proxy-5bqwh                             1/1       Running   2          15h
kube-system   kube-proxy-kngp9                             1/1       Running   2          16h
kube-system   kube-proxy-n85xl                             1/1       Running   5          23h
kube-system   kube-proxy-ncg2k                             1/1       Running   2          15h
kube-system   kube-proxy-qbfcf                             1/1       Running   2          21h
kube-system   kube-scheduler-master                        1/1       Running   5          22h
kube-system   traefik-ingress-controller-9dc7454cc-7rhpf   1/1       Running   1          14h
kube-system   weave-net-6mvc6                              2/2       Running   31         15h
kube-system   weave-net-8hff9                              2/2       Running   31         15h
kube-system   weave-net-9kwgr                              2/2       Running   31         21h
kube-system   weave-net-llgrk                              2/2       Running   41         22h
kube-system   weave-net-s2h62                              2/2       Running   29         16h

问题是当我尝试使用此URL http://192.168.1.231/连接到node01时。我找不到404页面...

所以我检查了日志，发现它们是默认帐户的问题:

$ kubectl日志traefik-ingress-controller-9dc7454cc-7rhpf

ERROR: logging before flag.Parse: E1226 07:29:15.195193       1 reflector.go:199] github.com/containous/traefik/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.Endpoints: endpoints is forbidden: User "system:serviceaccount:kube-system:default" cannot list endpoints at the cluster scope
ERROR: logging before flag.Parse: E1226 07:29:15.422807       1 reflector.go:199] github.com/containous/traefik/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.Secret: secrets is forbidden: User "system:serviceaccount:kube-system:default" cannot list secrets at the cluster scope
ERROR: logging before flag.Parse: E1226 07:29:15.915317       1 reflector.go:199] github.com/containous/traefik/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.Service: services is forbidden: User "system:serviceaccount:kube-system:default" cannot list services at the cluster scope
ERROR: logging before flag.Parse: E1226 07:29:16.108385       1 reflector.go:199] github.com/containous/traefik/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1beta1.Ingress: ingresses.extensions is forbidden: User "system:serviceaccount:kube-system:default" cannot list ingresses.extensions at the cluster scope

帐户系统:serviceaccount:kube-system:使用的默认帐户确实存在问题吗？我应该使用哪个帐户代替？

感谢您的帮助。

附加信息:

$ docker -v
Docker版本17.03.0-CE，内部版本60ccb22

$ kubectl描述pods traefik-ingress-controller -n kube-system

Name:         traefik-ingress-controller-9dc7454cc-7rhpf
Namespace:    kube-system
Node:         node01/192.168.1.231
Start Time:   Mon, 25 Dec 2017 20:54:45 +0000
Labels:       k8s-app=traefik-ingress-controller
              pod-template-hash=587301077
Annotations:  scheduler.alpha.kubernetes.io/tolerations=[
  {
    "key": "dedicated",
    "operator": "Equal",
    "value": "master",
    "effect": "NoSchedule"
  }
]

Status:         Running
IP:             192.168.1.231
Controlled By:  ReplicaSet/traefik-ingress-controller-9dc7454cc
Containers:
  traefik-ingress-controller:
    Container ID:  docker://9e28800da6937a48aa20b5ef6526846b321a516ad20ee24ea3d32876f6769531
    Image:         hypriot/rpi-traefik
    Image ID:      docker-pullable://hypriot/rpi-traefik@sha256:ecdfcd94571ec8c121c20a6ec616d68aeaad93150a0717260196f813e31737d9
    Ports:         80/TCP, 8888/TCP
    Args:
      --web
      --web.address=localhost:8888
      --kubernetes
    State:          Running
      Started:      Mon, 25 Dec 2017 22:24:33 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    255
      Started:      Mon, 25 Dec 2017 20:54:50 +0000
      Finished:     Mon, 25 Dec 2017 22:17:09 +0000
    Ready:          True
    Restart Count:  1
    Limits:
      cpu:     200m
      memory:  30Mi
    Requests:
      cpu:        100m
      memory:     20Mi
    Environment:  <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from default-token-4wzhl (ro)
Conditions:
  Type           Status
  Initialized    True
  Ready          True
  PodScheduled   True
Volumes:
  default-token-4wzhl:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  default-token-4wzhl
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  nginx-controller=traefik
Tolerations:     node.kubernetes.io/not-ready:NoExecute for 300s
                 node.kubernetes.io/unreachable:NoExecute for 300s
Events:          <none>

Name:         traefik-ingress-controller-9dc7454cc-jszgz
Namespace:    kube-system
Node:         node01/
Start Time:   Mon, 25 Dec 2017 18:28:21 +0000
Labels:       k8s-app=traefik-ingress-controller
              pod-template-hash=587301077
Annotations:  scheduler.alpha.kubernetes.io/tolerations=[
  {
    "key": "dedicated",
    "operator": "Equal",
    "value": "master",
    "effect": "NoSchedule"
  }
]

Status:         Failed
Reason:         MatchNodeSelector
Message:        Pod Predicate MatchNodeSelector failed
IP:
Controlled By:  ReplicaSet/traefik-ingress-controller-9dc7454cc
Containers:
  traefik-ingress-controller:
    Image:  hypriot/rpi-traefik
    Ports:  80/TCP, 8888/TCP
    Args:
      --web
      --web.address=localhost:8888
      --kubernetes
    Limits:
      cpu:     200m
      memory:  30Mi
    Requests:
      cpu:        100m
      memory:     20Mi
    Environment:  <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from default-token-4wzhl (ro)
Volumes:
  default-token-4wzhl:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  default-token-4wzhl
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  nginx-controller=traefik
Tolerations:     node.kubernetes.io/not-ready:NoExecute for 300s
                 node.kubernetes.io/unreachable:NoExecute for 300s
Events:          <none>

$ kubectl描述pods weave-net-9kwgr -n kube-system

Name:           weave-net-llgrk
Namespace:      kube-system
Node:           master/192.168.1.230
Start Time:     Mon, 25 Dec 2017 13:33:40 +0000
Labels:         controller-revision-hash=2209123374
                name=weave-net
                pod-template-generation=1
Annotations:    <none>
Status:         Running
IP:             192.168.1.230
Controlled By:  DaemonSet/weave-net
Containers:
  weave:
    Container ID:  docker://7824b8b02f1a8f5a53d7f27f0c12b44f73a4b666a694b974142f974294bedd6c
    Image:         weaveworks/weave-kube:2.1.3
    Image ID:      docker-pullable://weaveworks/weave-kube@sha256:07a3d56b8592ea3e00ace6f2c3eb7e65f3cc4945188a9e2a884b8172e6a0007e
    Port:          <none>
    Command:
      /home/weave/launch.sh
    State:          Running
      Started:      Tue, 26 Dec 2017 00:13:58 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    1
      Started:      Tue, 26 Dec 2017 00:08:38 +0000
      Finished:     Tue, 26 Dec 2017 00:08:50 +0000
    Ready:          True
    Restart Count:  37
    Requests:
      cpu:     10m
    Liveness:  http-get http://127.0.0.1:6784/status delay=30s timeout=1s period=10s #success=1 #failure=3
    Environment:
      HOSTNAME:   (v1:spec.nodeName)
    Mounts:
      /host/etc from cni-conf (rw)
      /host/home from cni-bin2 (rw)
      /host/opt from cni-bin (rw)
      /host/var/lib/dbus from dbus (rw)
      /lib/modules from lib-modules (rw)
      /run/xtables.lock from xtables-lock (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from weave-net-token-mx5jk (ro)
      /weavedb from weavedb (rw)
  weave-npc:
    Container ID:   docker://b199904c10ed34501748c25e13862113aeb32c7779b0797d72c95f9e9d868331
    Image:          weaveworks/weave-npc:2.1.3
    Image ID:       docker-pullable://weaveworks/weave-npc@sha256:f35eb8166d7dae3fa7bb4d9892ab6dc8ea5c969f73791be590a0a213767c0f07
    Port:           <none>
    State:          Running
      Started:      Mon, 25 Dec 2017 22:24:32 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    255
      Started:      Mon, 25 Dec 2017 20:54:30 +0000
      Finished:     Mon, 25 Dec 2017 22:17:09 +0000
    Ready:          True
    Restart Count:  4
    Requests:
      cpu:  10m
    Environment:
      HOSTNAME:   (v1:spec.nodeName)
    Mounts:
      /run/xtables.lock from xtables-lock (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from weave-net-token-mx5jk (ro)
Conditions:
  Type           Status
  Initialized    True
  Ready          True
  PodScheduled   True
Volumes:
  weavedb:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/weave
    HostPathType:
  cni-bin:
    Type:          HostPath (bare host directory volume)
    Path:          /opt
    HostPathType:
  cni-bin2:
    Type:          HostPath (bare host directory volume)
    Path:          /home
    HostPathType:
  cni-conf:
    Type:          HostPath (bare host directory volume)
    Path:          /etc
    HostPathType:
  dbus:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/dbus
    HostPathType:
  lib-modules:
    Type:          HostPath (bare host directory volume)
    Path:          /lib/modules
    HostPathType:
  xtables-lock:
    Type:          HostPath (bare host directory volume)
    Path:          /run/xtables.lock
    HostPathType:
  weave-net-token-mx5jk:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  weave-net-token-mx5jk
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  <none>
Tolerations:     :NoSchedule
                 node.kubernetes.io/disk-pressure:NoSchedule
                 node.kubernetes.io/memory-pressure:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute
                 node.kubernetes.io/unreachable:NoExecute
Events:          <none>
root@master:/home/pirate# kubectl describe pods weave-net-9kwgr -n kube-system
Name:           weave-net-9kwgr
Namespace:      kube-system
Node:           node01/192.168.1.231
Start Time:     Mon, 25 Dec 2017 14:50:37 +0000
Labels:         controller-revision-hash=2209123374
                name=weave-net
                pod-template-generation=1
Annotations:    <none>
Status:         Running
IP:             192.168.1.231
Controlled By:  DaemonSet/weave-net
Containers:
  weave:
    Container ID:  docker://92e31f645b4dcd41e4d8189a6f67fa70a395971e071d635dc4c4208b8d1daf63
    Image:         weaveworks/weave-kube:2.1.3
    Image ID:      docker-pullable://weaveworks/weave-kube@sha256:07a3d56b8592ea3e00ace6f2c3eb7e65f3cc4945188a9e2a884b8172e6a0007e
    Port:          <none>
    Command:
      /home/weave/launch.sh
    State:          Running
      Started:      Tue, 26 Dec 2017 00:13:39 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    1
      Started:      Tue, 26 Dec 2017 00:08:17 +0000
      Finished:     Tue, 26 Dec 2017 00:08:28 +0000
    Ready:          True
    Restart Count:  29
    Requests:
      cpu:     10m
    Liveness:  http-get http://127.0.0.1:6784/status delay=30s timeout=1s period=10s #success=1 #failure=3
    Environment:
      HOSTNAME:   (v1:spec.nodeName)
    Mounts:
      /host/etc from cni-conf (rw)
      /host/home from cni-bin2 (rw)
      /host/opt from cni-bin (rw)
      /host/var/lib/dbus from dbus (rw)
      /lib/modules from lib-modules (rw)
      /run/xtables.lock from xtables-lock (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from weave-net-token-mx5jk (ro)
      /weavedb from weavedb (rw)
  weave-npc:
    Container ID:   docker://ddd86bef74d3fd40134c8609551cc07658aa62a2ede7ce51aec394001049e96d
    Image:          weaveworks/weave-npc:2.1.3
    Image ID:       docker-pullable://weaveworks/weave-npc@sha256:f35eb8166d7dae3fa7bb4d9892ab6dc8ea5c969f73791be590a0a213767c0f07
    Port:           <none>
    State:          Running
      Started:      Mon, 25 Dec 2017 22:24:32 +0000
    Last State:     Terminated
      Reason:       Error
      Exit Code:    255
      Started:      Mon, 25 Dec 2017 20:54:30 +0000
      Finished:     Mon, 25 Dec 2017 22:17:09 +0000
    Ready:          True
    Restart Count:  2
    Requests:
      cpu:  10m
    Environment:
      HOSTNAME:   (v1:spec.nodeName)
    Mounts:
      /run/xtables.lock from xtables-lock (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from weave-net-token-mx5jk (ro)
Conditions:
  Type           Status
  Initialized    True
  Ready          True
  PodScheduled   True
Volumes:
  weavedb:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/weave
    HostPathType:
  cni-bin:
    Type:          HostPath (bare host directory volume)
    Path:          /opt
    HostPathType:
  cni-bin2:
    Type:          HostPath (bare host directory volume)
    Path:          /home
    HostPathType:
  cni-conf:
    Type:          HostPath (bare host directory volume)
    Path:          /etc
    HostPathType:
  dbus:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/dbus
    HostPathType:
  lib-modules:
    Type:          HostPath (bare host directory volume)
    Path:          /lib/modules
    HostPathType:
  xtables-lock:
    Type:          HostPath (bare host directory volume)
    Path:          /run/xtables.lock
    HostPathType:
  weave-net-token-mx5jk:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  weave-net-token-mx5jk
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  <none>
Tolerations:     :NoSchedule
                 node.kubernetes.io/disk-pressure:NoSchedule
                 node.kubernetes.io/memory-pressure:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute
                 node.kubernetes.io/unreachable:NoExecute
Events:          <none>

最佳答案

您的Traefik服务帐户缺少适当的RBAC特权。默认情况下，任何应用程序都不能访问任何Kubernetes API。

您必须确保已授予必要的权利。请检查our Kubernetes guide了解详细信息。

关于docker - 找不到RPI Kubernetes节点上的Traefik返回404页面，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/47979205/

文章推荐： c# - 通过URL访问Docker卷

文章推荐： date - Apache Pig转换为YYYY-MM-DDThh:mm:ssZ日期格式

文章推荐： hadoop - 以高吞吐量在 HDFS 上进行流式数据写入

文章推荐： wordpress - 如何从Shell脚本向docker运行函数和变量？

javascript - 我正在尝试找到一种在服务器端使用 GPIO 输入将客户端重定向到另一个网页的方法 rpi, RPi.GPIO, python,flask,j s
我正在从事密室逃脱项目。实际上，我试图创建的行为如下: 网络浏览器以通常的方式显示网络应用程序的一部分。从此时起，客户端上将不再有键盘/鼠标的输入。我已经使用 JS 解决了基于时间的更改，因此我可以加
macos - RPi 上的 Netatalk，导致 hfs+ 驱动器在 RPi 上只读，而无法安装在 macOS 上
背景我试图使用 netatalk创建 Time Capsule使用 Raspberry Pi 3 ，按照教程here .部分版本信息: netatalk 3.1.12 macOS 10.14.5 树
How to change I2C clock on Ubuntu 22.04 rpi-4(如何在Ubuntu 22.04 RPI-4上更改I2C时钟)
目标：将i2c时钟频率更改为400 khz。动机：试图通过i2c使用Adafruit BNO085，但RPI i2c时钟伸展存在已知问题。(这是一个已知的漏洞，自2012年以来一直在传播)。。我一直在
Python rpi GPIO输出控制基于GPIO输入和一天中的时间
我正在尝试编写一个小脚本来基于两个因素控制两个树莓派的 gpio 输出引脚:GPIO.input.17 的状态和一天中的时间。我希望 gpio.output.23 和 gpio.output.25
docker - RPI Docker停电后不会重新启动容器
拥有运行Docker 17.11.0-ce和Docker Compose 1.17.1的RaspberryPi。我有一个包含两个容器的docker-compose文件，都将restart-polic
Python RPi - 从另一个脚本运行脚本时找不到文件
我正在尝试使用 Raspbian 在 Raspberry Pi 3 上从另一个 python 脚本运行 python 脚本。几个小时以来，我一直在努力寻找方法来做到这一点，但没有找到任何有效的方法。我
python - 要安装哪个版本的 rpy？
我想通过 Python 使用 R。我想知道要安装哪个版本的 rpy，文档中并不清楚。我使用的是 OSX 10.5 (leopard) 的 Mac。我使用Python 2.7版本。感谢您的帮助!
python - LED闪烁如何打发时间。 sleep RPI
我在qtdesigner中设计了一个表单。它具有“开”和“关”按钮。开按钮应该开始闪烁，而关按钮应该停止它。因此，如果time.sleep持续时间很短，那没有问题，但是当我写10秒钟的 sleep 时
runtime-error - mpiexec检查点错误(RPi)
当我尝试运行应用程序时(只是一个简单的hello_world.c不起作用)，每次都会收到此错误: mpiexec -ckpointlib blcr -ckpoint-prefix /tmp/ -ckp
python - RPi.GPIO 中断调用函数的时间不够长
所以我正在尝试设计一个 LCD 屏幕，它有一个菜单和一堆不同的功能，并且它应该有 4 个按钮。选择、菜单以及向上和向下。现在我只是想处理菜单按钮。我希望它始终显示时钟，除非按下菜单按钮。但是当我按下按
python - Keras 已安装但未导入 (rpi)
我按照此处的说明在我的 Raspberry Pi 上成功安装了 Keras: https://medium.com/@abhizcc/installing-latest-tensor-flow-and
python - 通过 Rpy 排序分位数平均值
这里的真正目标是在Python中找到分位数平均值(或总和，或中位数等)。由于我不是 Python 的高级用户，但已经使用 R 一段时间了，所以我选择的路线是通过 Rpy。但是，我遇到了以下问题:返回的
python - 使用 RPy 进行多处理安全吗？
在多处理环境中调用 RPy 函数是否安全？关于 RPy 是否存在任何应该注意的多处理问题？一个简单的例子如下: from multiprocessing import Pool from rpy i
python - 如何使用蓝牙批处理脚本自动配对 RPi 和 Android
我正在开发一个将 Android 设备与 Raspberry Pi 连接起来的项目。 RPi 需要被视为用户永远不需要触摸的可部署设备。出于这个原因，我正在尝试在 RPi 上编写一个启动批处理脚本，允
java - 如何从服务器(jetty服务器)发送字节数组到客户端(RPI)？
我正在尝试从服务器向客户端发送数据字节，因此我使用文件指针来指向文件已读取的位置并读取字节集并将其发送到客户端。下面是服务器端 byte[] b = readByte()// my function
迁移到外部硬盘 RPi 后 MySQL 将无法启动
我正在尝试将 MySQL 数据库从我的 Raspberry Pi 重新定位到我的外部硬盘驱动器，以便我可以保留更大的数据库。我对此知之甚少，所以如果这个问题太简单，我深表歉意，但这些是我迄今为止所采取
python - 带有威胁回调的树莓派 RPi.GPIO 错误
我被 Python 包中的 wait_for_edge 函数卡住了 RPi .我为下降的 gpio 添加了多个事件检测，只要回调函数不包含像 os.system("mpc pause") 然后脚本崩
java - RPI 上的 JDK8 安装路径不起作用
我尝试在 Raspberry Pi 上升级现有的 JDK8，但失败了。我从oracle网站下载了ARM版本，在Windows中解压，通过FTP传输到我的pi上，然后复制到/usr/local。然后
Java RPi 运行时的 GPIO 问题
我的代码是这样的 package me.Andrew.Keypad.Listener; import java.util.HashMap; import com.pi4j.io.gpio.GpioCo
python - 在 RPi 3 上复制文件的奇怪脚本行为
编写脚本保存在闪存驱动器上，用于更新多个树莓派上的代码。我的想法是，我将目录从树莓派 sd 卡备份到闪存驱动器，然后将新文件从闪存驱动器复制到 pi 中的 sd 卡。我得到的行为是所有内容都从闪存移

行者123

个人简介

我是一名优秀的程序员,十分优秀！

作者热门文章

滴滴打车优惠券免费领取

全站热门文章

首页

博学

6Ren·AI

商城

docker - 找不到RPI Kubernetes节点上的Traefik返回404页面