wanjunlei 感谢回复, ks-controller-manager 状态正常, 报错日志如下:
ks-controller-manager-7c6cdcdcc5-mgx9r 1/1 Running 0 7h19m
ks-controller-manager-7c6cdcdcc5-mgx9r Logs:
E0925 22:52:00.969018 1 basecontroller.go:132] error syncing 'admin-hpsmm' in loginrecord-controller: Internal error occurred: failed calling webhook "users.iam.kubesphere.io": Post "https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2?timeout=30s": Address is not allowed, requeuing
I0925 22:52:00.974233 1 basecontroller.go:127] Successfully Synced key:admin-hpsmm in loginrecord-controller
I0925 22:52:00.974309 1 event.go:282] Event(v1.ObjectReference{Kind:"LoginRecord", Namespace:"", Name:"admin-hpsmm", UID:"3f0d5017-9496-40d5-8c4e-108053419e1a", APIVersion:"iam.kubesphere.io/v1alpha2", ResourceVersion:"27456085", FieldPath:""}): type: 'Normal' reason: 'Synced' LoginRecord synced successfully
klon kubesphere-system ks-apiserver-7c8c448bbb-g8v8d
I0925 15:28:43.568660 1 apiserver.go:298] Start listening on :9090
E0925 22:59:25.938727 1 im.go:83] Internal error occurred: failed calling webhook "users.iam.kubesphere.io": Post "https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2?timeout=30s": Address is not allowed
API-Server 可以调通
wget https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alph
a2?timeout=30s --no-check-certificate
Connecting to ks-controller-manager.kubesphere-system.svc:443 (10.100.165.231:443)
saving to 'validate-email-iam-kubesphere-io-v1alpha2?timeout=30s'
validate-email-iam-k 100% |********************************************************| 128 0:00:00 ETA
'validate-email-iam-kubesphere-io-v1alpha2?timeout=30s' saved