关于“[DEPRECATED] AHYBRID070 Configuring GKE for Multi-Cluster Operation with Istio”的评价

I receive an error while running : gcloud iam service-accounts keys create $GKE_SA_CREDS \ --iam-account=$PROJECT@$PROJECT.iam.gserviceaccount.com \ --project=$PROJECT Permission denied

Giuseppe L. · 评论over 5 years之前

Hitoshi Y. · 评论over 5 years之前

Igor S. · 评论over 5 years之前

Scott K. · 评论over 5 years之前

Ramesh P. · 评论over 5 years之前

Anil Kumar M. · 评论over 5 years之前

Soo Hon L. · 评论over 5 years之前

warut p. · 评论over 5 years之前

SEBASTIEN M. · 评论over 5 years之前

Chris K. · 评论over 5 years之前

Antonio R. · 评论over 5 years之前

Ravy S. · 评论over 5 years之前

Anandasankar J. · 评论over 5 years之前

Anjul S. · 评论over 5 years之前

Alexander M. · 评论over 5 years之前

student_00_ade6250e9d5f@cloudshell:~/anthos-workshop (qwiklabs-gcp-00-75f49d4a3d6b)$ kubectl -n hipster1 describe pod -l app=emailservice Name: emailservice-59c668cc8c-frvw5 Namespace: hipster1 Priority: 0 Node: nodes-2mqf/10.128.0.4 Start Time: Wed, 03 Jun 2020 05:43:21 +1000 Labels: app=emailservice pod-template-hash=59c668cc8c Annotations: sidecar.istio.io/status: {"version":"2696c96840179bdcd8f86ed60a643396f0cb250f56458b46a7fc667e6c75ef7f","initContainers":["istio-init"],"containers":["istio-proxy"]... Status: Running IP: 100.96.2.8 IPs: <none> Controlled By: ReplicaSet/emailservice-59c668cc8c Init Containers: istio-init: Container ID: docker://b857f2881465c52b54cb705bb8029b188dc7b879f45c892eaf6a68d5e0270c5d Image: docker.io/istio/proxy_init:1.3.2 Image ID: docker-pullable://istio/proxy_init@sha256:af88d6da794956d0c4691dd6385e001a9675ec5c6a13daf88636bd6a375964fe Port: <none> Host Port: <none> Args: -p 15001 -z 15006 -u 1337 -m REDIRECT -i * -x -b * -d 15020 State: Terminated Reason: Completed Exit Code: 0 Started: Wed, 03 Jun 2020 05:43:23 +1000 Finished: Wed, 03 Jun 2020 05:43:24 +1000 Ready: True Restart Count: 0 Limits: cpu: 100m memory: 50Mi Requests: cpu: 10m memory: 10Mi Environment: <none> Mounts: /var/run/secrets/kubernetes.io/serviceaccount from default-token-g85lw (ro) Containers: server: Container ID: docker://f2245fe2e780743393919fc45a6c0e707567cfe65c15447e24b0958111f70e0e Image: gcr.io/google-samples/microservices-demo/emailservice:v0.1.0 Image ID: docker-pullable://gcr.io/google-samples/microservices-demo/emailservice@sha256:898b3371e10df6f4f9975e43b44d6482b34dd13bd0ab9923a8f7d895eb480b3d Port: 8080/TCP Host Port: 0/TCP State: Running Started: Wed, 03 Jun 2020 05:47:37 +1000 Last State: Terminated Reason: Error Exit Code: 137 Started: Wed, 03 Jun 2020 05:45:59 +1000 Finished: Wed, 03 Jun 2020 05:46:16 +1000 Ready: False Restart Count: 6 Limits: cpu: 200m memory: 128Mi Requests: cpu: 100m memory: 64Mi Liveness: exec [/bin/grpc_health_probe -addr=:8080] delay=0s timeout=1s period=5s #success=1 #failure=3 Readiness: exec [/bin/grpc_health_probe -addr=:8080] delay=0s timeout=1s period=5s #success=1 #failure=3 Environment: <none> Mounts: /var/run/secrets/kubernetes.io/serviceaccount from default-token-g85lw (ro) istio-proxy: Container ID: docker://a42d5b44cd607107e264aa18d182a468a32b0d8867fc7c022615d0daba5aa562 Image: docker.io/istio/proxyv2:1.3.2 Image ID: docker-pullable://istio/proxyv2@sha256:6a7d338b8da5a99574f0a78195da974d895ad6b65682660b1717c43e6b7559e6 Port: 15090/TCP Host Port: 0/TCP Args: proxy sidecar --domain $(POD_NAMESPACE).svc.cluster.local --configPath /etc/istio/proxy --binaryPath /usr/local/bin/envoy --serviceCluster emailservice.$(POD_NAMESPACE) --drainDuration 45s --parentShutdownDuration 1m0s --discoveryAddress istio-pilot.istio-system:15011 --zipkinAddress zipkin.istio-system:9411 --dnsRefreshRate 300s --connectTimeout 10s --proxyAdminPort 15000 --concurrency 2 --controlPlaneAuthPolicy MUTUAL_TLS --statusPort 15020 --applicationPorts 8080 State: Running Started: Wed, 03 Jun 2020 05:43:32 +1000 Ready: True Restart Count: 0 Limits: cpu: 2 memory: 1Gi Requests: cpu: 100m memory: 128Mi Readiness: http-get http://:15020/healthz/ready delay=1s timeout=1s period=2s #success=1 #failure=30 Environment: POD_NAME: emailservice-59c668cc8c-frvw5 (v1:metadata.name) ISTIO_META_POD_PORTS: [ {"containerPort":8080,"protocol":"TCP"} ] ISTIO_META_CLUSTER_ID: Kubernetes POD_NAMESPACE: hipster1 (v1:metadata.namespace) INSTANCE_IP: (v1:status.podIP) SERVICE_ACCOUNT: (v1:spec.serviceAccountName) ISTIO_META_POD_NAME: emailservice-59c668cc8c-frvw5 (v1:metadata.name) ISTIO_META_CONFIG_NAMESPACE: hipster1 (v1:metadata.namespace) SDS_ENABLED: false ISTIO_META_INTERCEPTION_MODE: REDIRECT ISTIO_META_INCLUDE_INBOUND_PORTS: 8080 ISTIO_METAJSON_LABELS: {"app":"emailservice","pod-template-hash":"59c668cc8c"} ISTIO_META_WORKLOAD_NAME: emailservice ISTIO_META_OWNER: kubernetes://api/apps/v1/namespaces/hipster1/deployments/emailservice ISTIO_KUBE_APP_PROBERS: {} Mounts: /etc/certs/ from istio-certs (ro) /etc/istio/proxy from istio-envoy (rw) /var/run/secrets/kubernetes.io/serviceaccount from default-token-g85lw (ro) Conditions: Type Status Initialized True Ready False ContainersReady False PodScheduled True Volumes: default-token-g85lw: Type: Secret (a volume populated by a Secret) SecretName: default-token-g85lw Optional: false istio-envoy: Type: EmptyDir (a temporary directory that shares a pod's lifetime) Medium: Memory SizeLimit: <unset> istio-certs: Type: Secret (a volume populated by a Secret) SecretName: istio.default Optional: true QoS Class: Burstable Node-Selectors: <none> Tolerations: node.kubernetes.io/not-ready:NoExecute for 300s node.kubernetes.io/unreachable:NoExecute for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 4m20s default-scheduler Successfully assigned hipster1/emailservice-59c668cc8c-frvw5 to nodes-2mqf Normal Pulling 4m19s kubelet, nodes-2mqf Pulling image "docker.io/istio/proxy_init:1.3.2" Normal Created 4m18s kubelet, nodes-2mqf Created container istio-init Normal Started 4m18s kubelet, nodes-2mqf Started container istio-init Normal Pulled 4m18s kubelet, nodes-2mqf Successfully pulled image "docker.io/istio/proxy_init:1.3.2" Normal Pulling 4m17s kubelet, nodes-2mqf Pulling image "gcr.io/google-samples/microservices-demo/emailservice:v0.1.0" Normal Started 4m9s kubelet, nodes-2mqf Started container istio-proxy Normal Created 4m9s kubelet, nodes-2mqf Created container istio-proxy Normal Pulled 4m9s kubelet, nodes-2mqf Successfully pulled image "gcr.io/google-samples/microservices-demo/emailservice:v0.1.0" Normal Created 4m9s kubelet, nodes-2mqf Created container server Normal Pulled 4m9s kubelet, nodes-2mqf Container image "docker.io/istio/proxyv2:1.3.2" already present on machine Normal Started 4m9s kubelet, nodes-2mqf Started container server Warning DNSConfigForming 4m6s (x6 over 4m20s) kubelet, nodes-2mqf Search Line limits were exceeded, some search paths have been omitted, the applied search line is: hipster1.svc.cluster.local svc.cluster.local cluster.local c.qwiklabs-gcp-00-75f49d4a3d6b.internal google.internal global Warning Unhealthy 4m5s kubelet, nodes-2mqf Readiness probe failed: timeout: failed to connect service ":8080" within 1s Warning Unhealthy 4m4s kubelet, nodes-2mqf Liveness probe failed: timeout: failed to connect service ":8080" within 1s Warning Unhealthy 3m55s (x2 over 4m) kubelet, nodes-2mqf Liveness probe failed: error: health rpc failed: rpc error: code = Unknown desc = Exception calling application: 403 Request had insufficient authentication scopes. Normal Killing 3m55s kubelet, nodes-2mqf Container server failed liveness probe, will be restarted Warning Unhealthy 3m52s (x3 over 4m2s) kubelet, nodes-2mqf Readiness probe failed: error: health rpc failed: rpc error: code = Unknown desc = Exception calling application: 403 Request had insufficient authentication scopes.

Stephen M. · 评论over 5 years之前

Chad M. · 评论over 5 years之前

Ryan B. · 评论over 5 years之前

RICHARD S. · 评论over 5 years之前

Visanth V. · 评论over 5 years之前

Shambhu K. · 评论over 5 years之前

Anup C. · 评论over 5 years之前

Imandeep R. · 评论over 5 years之前

Thomas W. · 评论over 5 years之前

Jamie T. · 评论over 5 years之前