k8s1.22.3 traefik | ingress | Ingress controller

解决Kubernetes Ingress资源更新权限问题及版本兼容性

最新推荐文章于 2024-06-03 23:46:02 发布

原创

最新推荐文章于 2024-06-03 23:46:02 发布 · 1.5k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#kubernetes

尝试 traefik + ingress、

wget -O nginx-ingress.yaml https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.41.2/deploy/static/provider/cloud/deploy.yaml

### 注意版本 ###
[root@k8s-node-01 traefix-ingress]# kubectl version
Client Version: version.Info{
   
   Major:"1", Minor:"22", GitVersion:"v1.22.3", GitCommit:"c92036820499fedefec0f847e2054d824aea6cd1", GitTreeState:"clean", BuildDate:"2021-10-27T18:41:28Z", GoVersion:"go1.16.9", Compiler:"gc", Platform:"linux/amd64"}
[root@k8s-node-01 traefix-ingress]# kubectl apply -f mandatory.yaml

遇到问题：
Failed to watch *v1beta1.Ingress: failed to list *v1beta1.Ingress: the server could not find the requested resource
在这里插入图片描述

https://blog.youkuaiyun.com/qq_30257131/article/details/120332397

kubectl version v1.22 不再支持v1beta1
所以要解决这个问题需要把ingress nginx 换成最新的版本 1.0.0

遇到问题：
User “system:serviceaccount:ingress-nginx:ingress-nginx” cannot update resource “configmaps” in API group “” in the namespace “ingress-nginx”

[root@k8s-node-01 traefix-ingress]# kubectl logs ingress-nginx-controller-6f4d986c46-5l5j4 -n ingress-nginx
...
E1231 03:20:42.713259       7 leaderelection.go:367] Failed to update lock: configmaps "ingress-controller-leader" is forbidden: User "system:serviceaccount:ingress-nginx:ingress-nginx" cannot update resource "configmaps" in API group "" in the namespace "ingress-nginx"

clusterRole 无update权限…
在这里插入图片描述

在这里插入图片描述


apiVersion: v1
kind: Namespace
metadata:
  name: ingress-nginx
  labels:
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/instance: ingress-nginx

---
# Source: ingress-nginx/templates/controller-serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    helm.sh/chart: ingress-nginx-3.10.1
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/instance: ingress-nginx
    app.kubernetes.io/version: 0.41.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: controller
  name: ingress-nginx
  namespace: ingress-nginx
---
# Source: ingress-nginx/templates/controller-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  labels:
    helm.sh/chart: ingress-nginx-3.10.1
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/instance: ingress-nginx
    app.kubernetes.io/version: 0.41.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: controller
  name: ingress-nginx-controller
  namespace: ingress-nginx
data:
---
# Source: ingress-nginx/templates/clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    helm.sh/chart: ingress-nginx-3.10.1
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/instance: ingress-nginx
    app.kubernetes.io/version: 0.41.2
    app.kubernetes.io/managed-by: Helm
  name: ingress-nginx
rules:
  - apiGroups:
      - ''
    resources:
      - configmaps
      - endpoints
      - nodes
      - pods
      - secrets
    verbs:
      - list
      - watch
      - update  ##加上update权限
  - apiGroups:
      - ''
    resources:
      - nodes
    verbs:
      - get
  - apiGr