I0430 16:20:47.032862 5472 request.go:655] Throttling request took 1.180660894s, request: GET:https://lb.kubesphere.local:6443/apis/batch/v1beta1?timeout=32s
Name: istio-ingressgateway-7d7fd96b9-84mxb
Namespace: istio-system
Priority: 0
Node: node1/10.43.40.136
Start Time: Fri, 30 Apr 2021 15:01:37 +0800
Labels: app=istio-ingressgateway
chart=gateways
heritage=Tiller
istio=ingressgateway
pod-template-hash=7d7fd96b9
release=istio
service.istio.io/canonical-name=istio-ingressgateway
service.istio.io/canonical-revision=1-6-10
Annotations: sidecar.istio.io/inject: false
Status: Pending
IP:
IPs: <none>
Controlled By: ReplicaSet/istio-ingressgateway-7d7fd96b9
Containers:
istio-proxy:
Container ID:
Image: istio/proxyv2:1.6.10
Image ID:
Ports: 15021/TCP, 8080/TCP, 8443/TCP, 15443/TCP, 15011/TCP, 15012/TCP, 8060/TCP, 853/TCP, 15090/TCP
Host Ports: 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP
Args:
proxy
router
--domain
$(POD_NAMESPACE).svc.cluster.local
--proxyLogLevel=warning
--proxyComponentLogLevel=misc:error
--log_output_level=default:info
--serviceCluster
istio-ingressgateway
--trust-domain=cluster.local
State: Waiting
Reason: ContainerCreating
Ready: False
Restart Count: 0
Limits:
cpu: 2
memory: 1Gi
Requests:
cpu: 100m
memory: 128Mi
Readiness: http-get http://:15021/healthz/ready delay=1s timeout=1s period=2s #success=1 #failure=30
Environment:
JWT_POLICY: first-party-jwt
PILOT_CERT_PROVIDER: istiod
CA_ADDR: istiod-1-6-10.istio-system.svc:15012
NODE_NAME: (v1:spec.nodeName)
POD_NAME: istio-ingressgateway-7d7fd96b9-84mxb (v1:metadata.name)
POD_NAMESPACE: istio-system (v1:metadata.namespace)
INSTANCE_IP: (v1:status.podIP)
HOST_IP: (v1:status.hostIP)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
CANONICAL_SERVICE: (v1:metadata.labels['service.istio.io/canonical-name'])
CANONICAL_REVISION: (v1:metadata.labels['service.istio.io/canonical-revision'])
ISTIO_META_WORKLOAD_NAME: istio-ingressgateway
ISTIO_META_OWNER: kubernetes://apis/apps/v1/namespaces/istio-system/deployments/istio-ingressgateway
ISTIO_META_MESH_ID: cluster.local
ISTIO_META_ROUTER_MODE: sni-dnat
ISTIO_META_CLUSTER_ID: Kubernetes
Mounts:
/etc/istio/config from config-volume (rw)
/etc/istio/ingressgateway-ca-certs from ingressgateway-ca-certs (ro)
/etc/istio/ingressgateway-certs from ingressgateway-certs (ro)
/etc/istio/pod from podinfo (rw)
/etc/istio/proxy from istio-envoy (rw)
/var/run/ingress_gateway from ingressgatewaysdsudspath (rw)
/var/run/secrets/istio from istiod-ca-cert (rw)
/var/run/secrets/kubernetes.io/serviceaccount from istio-ingressgateway-service-account-token-gfxc8 (ro)
Conditions:
Type Status
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
istiod-ca-cert:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-ca-root-cert
Optional: false
podinfo:
Type: DownwardAPI (a volume populated by information about the pod)
Items:
metadata.labels -> labels
metadata.annotations -> annotations
istio-envoy:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
ingressgatewaysdsudspath:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium:
SizeLimit: <unset>
config-volume:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-1-6-10
Optional: true
ingressgateway-certs:
Type: Secret (a volume populated by a Secret)
SecretName: istio-ingressgateway-certs
Optional: true
ingressgateway-ca-certs:
Type: Secret (a volume populated by a Secret)
SecretName: istio-ingressgateway-ca-certs
Optional: true
istio-ingressgateway-service-account-token-gfxc8:
Type: Secret (a volume populated by a Secret)
SecretName: istio-ingressgateway-service-account-token-gfxc8
Optional: false
QoS Class: Burstable
Node-Selectors: <none>
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 79m default-scheduler Successfully assigned istio-system/istio-ingressgateway-7d7fd96b9-84mxb to node1
Warning FailedMount 65m (x2 over 72m) kubelet Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert], unattached volumes=[ingressgateway-ca-certs istio-ingressgateway-service-account-token-gfxc8 istio-envoy config-volume istiod-ca-cert ingressgatewaysdsudspath podinfo ingressgateway-certs]: timed out waiting for the condition
Warning FailedMount 59m kubelet Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert], unattached volumes=[podinfo ingressgateway-certs ingressgateway-ca-certs istio-ingressgateway-service-account-token-gfxc8 istio-envoy config-volume istiod-ca-cert ingressgatewaysdsudspath]: timed out waiting for the condition
Warning FailedMount 56m (x3 over 63m) kubelet Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert], unattached volumes=[istio-ingressgateway-service-account-token-gfxc8 istio-envoy config-volume istiod-ca-cert ingressgatewaysdsudspath podinfo ingressgateway-certs ingressgateway-ca-certs]: timed out waiting for the condition
Warning FailedMount 38m (x2 over 45m) kubelet Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert], unattached volumes=[istio-envoy config-volume istiod-ca-cert ingressgatewaysdsudspath podinfo ingressgateway-certs ingressgateway-ca-certs istio-ingressgateway-service-account-token-gfxc8]: timed out waiting for the condition
Warning FailedMount 18m (x4 over 77m) kubelet Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert], unattached volumes=[istiod-ca-cert ingressgatewaysdsudspath podinfo ingressgateway-certs ingressgateway-ca-certs istio-ingressgateway-service-account-token-gfxc8 istio-envoy config-volume]: timed out waiting for the condition
Warning FailedMount 9m7s (x8 over 74m) kubelet Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert], unattached volumes=[ingressgateway-certs ingressgateway-ca-certs istio-ingressgateway-service-account-token-gfxc8 istio-envoy config-volume istiod-ca-cert ingressgatewaysdsudspath podinfo]: timed out waiting for the condition
Warning FailedMount 3m54s (x45 over 79m) kubelet MountVolume.SetUp failed for volume "istiod-ca-cert" : configmap "istio-ca-root-cert" not found```