istio解决依赖镜像拉取是败问题

使用istioctl 安装istio服务,安装过程中报错 image拉取是败

添加一个配置文件作为istioctl的安装文件用,

cat my-istio-config.yaml
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: demo
  hub: registry.cn-beijing.aliyuncs.com/scorpio  # 统一仓库地址
  tag: 1.28.0  # 统一镜像标签
  components:
    ingressGateways:
    - name: istio-ingressgateway
      enabled: true

说明一下,这里的hub是指定自己私有的镜像仓库,(我这里直接将istio相关的镜像拉取到了自己的阿里云镜像仓库中了.)

然后将原来的istio卸载后重新安装即可.

#卸载istio
[root@prod-manage istio-1.28.0]# istioctl uninstall --purge
#安装istio

[root@prod-manage istio-1.28.0]# istioctl install -f my-istio-config.yaml -y
#说明一下这里的my-istio-comfig.yaml就是指定的配置文件,

最后说明一下,在installistio 的时候会报错 这里相对比较重要

[root@prod-manage istio-1.28.0]# kubectl describe po istio-ingressgateway-6845569bf8-mbj8p -n istio-system
.......

Events:
  Type     Reason          Age                From               Message
  ----     ------          ----               ----               -------
  Normal   Scheduled       48s                default-scheduler  Successfully assigned istio-system/istio-ingressgateway-6845569bf8-mbj8p to cn-beijing.10.40.248.43
  Normal   AllocIPSucceed  47s                terway-daemon      Alloc IP 10.40.250.53/16 took 714.762157ms
  Normal   BackOff         19s (x3 over 47s)  kubelet            Back-off pulling image "registry.cn-beijing.aliyuncs.com/scorpio/proxyv2:1.28.0"
  Warning  Failed          19s (x3 over 47s)  kubelet            Error: ImagePullBackOff
  Normal   Pulling         5s (x3 over 47s)   kubelet            Pulling image "registry.cn-beijing.aliyuncs.com/scorpio/proxyv2:1.28.0"
  Warning  Failed          5s (x3 over 47s)   kubelet            Failed to pull image "registry.cn-beijing.aliyuncs.com/scorpio/proxyv2:1.28.0": failed to pull and unpack image "registry.cn-beijing.aliyuncs.com/scorpio/proxyv2:1.28.0": failed to resolve reference "registry.cn-beijing.aliyuncs.com/scorpio/proxyv2:1.28.0": pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed
  Warning  Failed          5s (x3 over 47s)   kubelet            Error: ErrImagePull

#这里的镜像是istio自身的模板生成的拼接镜像,并且镜像名称也是默认的,
如果要改镜像仓库的话需要与原本的istio的名称一致,不然的话整起来很麻烦.

遇到一个argocd的问题,顺便记录一下

补充一个argocd的问题,有待完善

在使用argocd做部署应用的时候发现,
即便是对应的命名空间中的pod最初启动是败,
那么后续如果不手动delete相应pod的话只是sync的话是无法重新将躺了的应用拉起来的.
需要重新删除对应的pod,用deploy的自动拉取机制让pod重新拉起.