无法在本地 kubernetes 集群中部署入口

Question

我正在尝试通过在本地 kubernetes 集群中使用入口控制器来为我的两个 Web 应用程序设置前端。我遵循了 [1] 中列出的所有步骤和 [2] 中的详细说明。但到目前为止运气不佳。我得到的错误如下：

Warning CreatingLoadBalancerFailed Error creating load balancer (will retry): failed to ensure load balancer for service default/frontend: error creating loadbalancer a58617b3f260011e8ad84fa163e0c90a: error creating loadbalancer {a58617b3f260011e8ad84fa163e0c90a
Kubernetes external service a58617b3f260011e8ad84fa163e0c90a 7b4db6f7-3fc1-4c07-a84d-5c15b46e3ac2 <nil> }: Expected HTTP response code [201 202] when accessing [POST https://host.xyz.com:9696/v2.0/lbaas/loadbalancers],
but got 409 instead
{"NeutronError": {"message": "Quota exceeded for resources: ['loadbalancer'].", "type": "OverQuota", "detail": ""}}

我的服务处于待处理状态。

到目前为止，我不知道在哪里可以找到问题并希望得到任何建议。

manifest yaml 文件几乎与 [2] 相同，它只列出了 https 接口。但这里是为了完整性

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
   name: frontend
   annotations:
     ingress.kub.webernetes.io/rewrite-target: /
spec:
  tls:
  - secretName: ing-secret
  replicas: 1
  template:
    metadata:
      labels:
        k8s-app: nginx-ingress-lb
  containers:
  - args:
    - /nginx-ingress-controller
    - "--default-backend-service=$(POD_NAMESPACE)/default-http-backend"
    - "--default-ssl-certificate=$(POD_NAMESPACE)/ing-secret"
  env:
    - name: POD_NAME
      valueFrom:
        fieldRef:
          fieldPath: metadata.name
    - name: POD_NAMESPACE
      valueFrom:
        fieldRef:
          fieldPath: metadata.namespace
  image: "gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.5"
  rules:
  - host: host.xxx.com
    https:
      paths:
      - path: /app1
        backend:
          serviceName: app1
          servicePort: 8881
      - path: /app2
        backend:
          serviceName: app2
          servicePort: 8882
---
apiVersion: v1
kind: Service
metadata:
  name: frontend
spec:
  type: LoadBalancer
  ports:
  - name: https
    port: 443
    targetPort: https
  selector:
    k8s-app: nginx-ingress-lb

[1]https://kubernetes.io/docs/concepts/services-networking/ingress/

[2]https://hackernoon.com/setting-up-nginx-ingress-on-kubernetes-2b733d8d2f45

Answer 1

kubernetes 似乎正在使用 OpenStack lbaas 来配置入口资源底层的负载均衡器服务（请参阅错误日志中的 https://host.xyz.com:9696/v2.0/lbaas/loadbalancers）

AFAIK 此错误表明已配置的负载平衡器数量已达到资源限制。我会向您的集群管理员提出这个问题。

Answer 2

您的服务正在尝试在 AWS 中创建新的负载均衡器，并且超出了您所在区域的配额。我假设您有 20 个，因为这是默认值： https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_elastic_load_balancer

以下是有关如何请求提高限额的说明： https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html