minikube 上的 Istio - Envoy 缺少入站应用程序端口的侦听器：9095答案

【问题标题】：Istio on minikube - envoy missing listener for inbound application port: 9095minikube 上的 Istio - Envoy 缺少入站应用程序端口的侦听器：9095
【发布时间】：2019-09-21 05:24:41
【问题描述】：

我关注 this istio 教程（第 3 部分）。创建 minikube 本地注册表后，我需要运行以下命令：

kubectl run hellodemo --image=hellodemo:v1 --port=9095 --image-pull-policy=IfNotPresent

应该在 Pod 上运行 image 和 istio-proxy。当我运行kubectl get pods 时，我得到：

NAME                         READY   STATUS    RESTARTS   AGE
hellodemo-6d49fc6c51-adsa1   1/2     Running   0          1h

当我运行kubectl logs hellodemo-6d49fc6c51-adsa1 istio-proxy:

* failed checking application ports. listeners="0.0.0.0:15090","10.110.201.202:16686","10.96.0.1:443","10.104.103.28:15443","10.104.103.28:15031","10.101.128.212:14268","10.104.103.28:15030","10.111.177.172:443","10.104.103.28:443","10.109.4.23:80","10.111.177.172:15443","10.104.103.28:15020","10.104.103.28:15032","10.105.175.151:15011","10.101.128.212:14267","10.96.0.10:53","10.104.103.28:31400","10.104.103.28:15029","10.98.84.0:443","10.99.194.141:443","10.99.175.237:42422","0.0.0.0:9411","0.0.0.0:3000","0.0.0.0:15010","0.0.0.0:15004","0.0.0.0:8060","0.0.0.0:9901","0.0.0.0:20001","0.0.0.0:8080","0.0.0.0:9091","0.0.0.0:80","0.0.0.0:15014","0.0.0.0:9090","172.17.0.6:15020","0.0.0.0:15001"
* envoy missing listener for inbound application port: 9095
2019-05-02T16:24:28.709972Z info    Envoy proxy is NOT ready: 2 errors occurred:

* failed checking application ports. listeners="0.0.0.0:15090","10.110.201.202:16686","10.96.0.1:443","10.104.103.28:15443","10.104.103.28:15031","10.101.128.212:14268","10.104.103.28:15030","10.111.177.172:443","10.104.103.28:443","10.109.4.23:80","10.111.177.172:15443","10.104.103.28:15020","10.104.103.28:15032","10.105.175.151:15011","10.101.128.212:14267","10.96.0.10:53","10.104.103.28:31400","10.104.103.28:15029","10.98.84.0:443","10.99.194.141:443","10.99.175.237:42422","0.0.0.0:9411","0.0.0.0:3000","0.0.0.0:15010","0.0.0.0:15004","0.0.0.0:8060","0.0.0.0:9901","0.0.0.0:20001","0.0.0.0:8080","0.0.0.0:9091","0.0.0.0:80","0.0.0.0:15014","0.0.0.0:9090","172.17.0.6:15020","0.0.0.0:15001"
* envoy missing listener for inbound application port: 9095
2019-05-02T16:24:30.729987Z info    Envoy proxy is NOT ready: 2 errors occurred:

* failed checking application ports. listeners="0.0.0.0:15090","10.110.201.202:16686","10.96.0.1:443","10.104.103.28:15443","10.104.103.28:15031","10.101.128.212:14268","10.104.103.28:15030","10.111.177.172:443","10.104.103.28:443","10.109.4.23:80","10.111.177.172:15443","10.104.103.28:15020","10.104.103.28:15032","10.105.175.151:15011","10.101.128.212:14267","10.96.0.10:53","10.104.103.28:31400","10.104.103.28:15029","10.98.84.0:443","10.99.194.141:443","10.99.175.237:42422","0.0.0.0:9411","0.0.0.0:3000","0.0.0.0:15010","0.0.0.0:15004","0.0.0.0:8060","0.0.0.0:9901","0.0.0.0:20001","0.0.0.0:8080","0.0.0.0:9091","0.0.0.0:80","0.0.0.0:15014","0.0.0.0:9090","172.17.0.6:15020","0.0.0.0:15001"
* envoy missing listener for inbound application port: 9095

您知道阻止 istio-proxy 容器出现的问题是什么吗？

我在 minikube 上使用 istio-1.1.4。

【问题讨论】：

请运行kubectl describe <your pod>

标签： kubernetes minikube istio envoyproxy

【解决方案1】：

我也遇到了同样的问题。我按照文档，它说要在网关中启用 SDS。但是，我在网关和全局范围内都启用了它，这导致了上面的错误。

我从 values.yml 文件中删除了以下代码，一切正常：

global:
  sds:
    enabled: true

【讨论】：