search

HoussemDellai / aks-keyvault

Access Azure Key Vault secrets, keys and certs from AKS Pods using Secret Store CSI provider and Pod Identity.
28 stars 55 forks source link

pod "aad-pod-identity-nmi-xxx" CrashLoopBackOff after "helm install pod-identity aad-pod-identity/aad-pod-identity" #4

Open XinCai opened 3 years ago

XinCai commented 3 years ago

I've followed your guide step by step, and found out the AKS (v1.19.9) cluster was created with Network type (plugin):Kubenet

After install 

helm install pod-identity aad-pod-identity/aad-pod-identity"

And I found there is one pod which is CrashLoopBackOff

After inspect pod log, it shows me this: 

F0503 05:44:11.611397       1 main.go:82] AAD Pod Identity is not supported for Kubenet. Review https://azure.github.io/aad-pod-identity/docs/configure/aad_pod_identity_on_kubenet/ for more details.
goroutine 1 [running]:
k8s.io/klog/v2.stacks(0xc00000e001, 0xc000184000, 0xc7, 0x11c)
    /go/pkg/mod/k8s.io/klog/v2@v2.5.0/klog.go:1026 +0xb9
k8s.io/klog/v2.(*loggingT).output(0x210c560, 0xc000000003, 0x0, 0x0, 0xc0000b9c70, 0x1ab9e48, 0x7, 0x52, 0x0)
    /go/pkg/mod/k8s.io/klog/v2@v2.5.0/klog.go:975 +0x191
k8s.io/klog/v2.(*loggingT).printf(0x210c560, 0x3, 0x0, 0x0, 0x0, 0x0, 0x16a2ff9, 0x9c, 0x0, 0x0, ...)
    /go/pkg/mod/k8s.io/klog/v2@v2.5.0/klog.go:750 +0x191
k8s.io/klog/v2.Fatalf(...)
    /go/pkg/mod/k8s.io/klog/v2@v2.5.0/klog.go:1514
main.main()
    /go/src/github.com/Azure/aad-pod-identity/cmd/nmi/main.go:82 +0x1065

goroutine 6 [chan receive]:
k8s.io/klog/v2.(*loggingT).flushDaemon(0x210c560)
    /go/pkg/mod/k8s.io/klog/v2@v2.5.0/klog.go:1169 +0x8b
created by k8s.io/klog/v2.init.0
    /go/pkg/mod/k8s.io/klog/v2@v2.5.0/klog.go:417 +0xdf

goroutine 7 [select]:
go.opencensus.io/stats/view.(*worker).start(0xc00003a6e0)
    /go/pkg/mod/go.opencensus.io@v0.22.3/stats/view/worker.go:154 +0xcd
created by go.opencensus.io/stats/view.init.0
    /go/pkg/mod/go.opencensus.io@v0.22.3/stats/view/worker.go:32 +0x57

I think i need to re-create the cluster with Azure CNI network plugin.