search

istioworkshop / istio-workshop

Sources for the Istio workshop website
https://istioworkshop.github.io
8 stars 0 forks source link

Unavailable CustomResourceDefinition #6

Open BarkingBad opened 3 years ago

BarkingBad commented 3 years ago

While executing command istioctl manifest apply --set profile=demo from tutorial I get following message

Error message ``` - Applying manifest for component Base... ✔ Finished applying manifest for component Base. - Applying manifest for component Pilot... ✔ Finished applying manifest for component Pilot. Waiting for resources to become ready... Waiting for resources to become ready... Waiting for resources to become ready... Waiting for resources to become ready... Waiting for resources to become ready... - Applying manifest for component EgressGateways... - Applying manifest for component IngressGateways... - Applying manifest for component AddonComponents... ✔ Finished applying manifest for component EgressGateways. ✔ Finished applying manifest for component IngressGateways. ✔ Finished applying manifest for component AddonComponents. Error detail: Warning: apiextensions.k8s.io/v1beta1 CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use apiextensions.k8s.io/v1 CustomResourceDefinition (repeated 1 times) namespace/istio-system created customresourcedefinition.apiextensions.k8s.io/adapters.config.istio.io created customresourcedefinition.apiextensions.k8s.io/attributemanifests.config.istio.io created customresourcedefinition.apiextensions.k8s.io/authorizationpolicies.security.istio.io created customresourcedefinition.apiextensions.k8s.io/clusterrbacconfigs.rbac.istio.io created customresourcedefinition.apiextensions.k8s.io/destinationrules.networking.istio.io created customresourcedefinition.apiextensions.k8s.io/envoyfilters.networking.istio.io created customresourcedefinition.apiextensions.k8s.io/gateways.networking.istio.io created customresourcedefinition.apiextensions.k8s.io/handlers.config.istio.io created customresourcedefinition.apiextensions.k8s.io/httpapispecbindings.config.istio.io created customresourcedefinition.apiextensions.k8s.io/httpapispecs.config.istio.io created customresourcedefinition.apiextensions.k8s.io/instances.config.istio.io created customresourcedefinition.apiextensions.k8s.io/meshpolicies.authentication.istio.io created customresourcedefinition.apiextensions.k8s.io/peerauthentications.security.istio.io created customresourcedefinition.apiextensions.k8s.io/policies.authentication.istio.io created customresourcedefinition.apiextensions.k8s.io/quotaspecbindings.config.istio.io created customresourcedefinition.apiextensions.k8s.io/quotaspecs.config.istio.io created customresourcedefinition.apiextensions.k8s.io/rbacconfigs.rbac.istio.io created customresourcedefinition.apiextensions.k8s.io/requestauthentications.security.istio.io created customresourcedefinition.apiextensions.k8s.io/rules.config.istio.io created customresourcedefinition.apiextensions.k8s.io/serviceentries.networking.istio.io created customresourcedefinition.apiextensions.k8s.io/servicerolebindings.rbac.istio.io created customresourcedefinition.apiextensions.k8s.io/serviceroles.rbac.istio.io created customresourcedefinition.apiextensions.k8s.io/sidecars.networking.istio.io created customresourcedefinition.apiextensions.k8s.io/templates.config.istio.io created customresourcedefinition.apiextensions.k8s.io/virtualservices.networking.istio.io created clusterrole.rbac.authorization.k8s.io/istio-reader-istio-system created clusterrolebinding.rbac.authorization.k8s.io/istio-reader-istio-system created serviceaccount/istio-reader-service-account created Error detail: Warning: admissionregistration.k8s.io/v1beta1 ValidatingWebhookConfiguration is deprecated in v1.16+, unavailable in v1.22+; use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration (repeated 1 times) Warning: admissionregistration.k8s.io/v1beta1 MutatingWebhookConfiguration is deprecated in v1.16+, unavailable in v1.22+; use admissionregistration.k8s.io/v1 MutatingWebhookConfiguration (repeated 1 times) Warning: extensions/v1beta1 Ingress is deprecated in v1.14+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress (repeated 1 times) clusterrole.rbac.authorization.k8s.io/istio-galley-istio-system created clusterrole.rbac.authorization.k8s.io/istio-pilot-istio-system created clusterrole.rbac.authorization.k8s.io/istiod-istio-system created clusterrolebinding.rbac.authorization.k8s.io/istio-pilot-istio-system created clusterrolebinding.rbac.authorization.k8s.io/istiod-istio-system created validatingwebhookconfiguration.admissionregistration.k8s.io/istio-galley created validatingwebhookconfiguration.admissionregistration.k8s.io/istiod-istio-system created mutatingwebhookconfiguration.admissionregistration.k8s.io/istio-sidecar-injector created serviceaccount/istio-pilot-service-account created envoyfilter.networking.istio.io/metadata-exchange-1.4 created envoyfilter.networking.istio.io/metadata-exchange-1.5 created envoyfilter.networking.istio.io/stats-filter-1.4 created envoyfilter.networking.istio.io/stats-filter-1.5 created envoyfilter.networking.istio.io/tcp-metadata-exchange-1.5 created envoyfilter.networking.istio.io/tcp-stats-filter-1.5 created configmap/istio created configmap/istio-sidecar-injector created configmap/pilot-envoy-config created deployment.apps/istiod created poddisruptionbudget.policy/istiod created service/istio-pilot created service/istiod created ✘ Errors were logged during apply operation. Please check component installation logs above. Error: failed to apply manifests: errors were logged during apply operation ```
BarkingBad commented 3 years ago 
$ kops version
Version 1.20.0 (git-8ea83c6d233a15dacfcc769d4d82bea3f530cf72)
$ kubectl version
Client Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.0", GitCommit:"cb303e613a121a29364f75cc67d3d580833a7479", GitTreeState:"clean", BuildDate:"2021-04-08T16:31:21Z", GoVersion:"go1.16.1", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"20", GitVersion:"v1.20.6", GitCommit:"8a62859e515889f07e3e3be6a1080413f17cf2c3", GitTreeState:"clean", BuildDate:"2021-04-15T03:19:55Z", GoVersion:"go1.15.10", Compiler:"gc", Platform:"linux/amd64"}
bzurkowski commented 3 years ago

@BarkingBad It seems these are only warnings emitted by the Kubernetes API informing deprecation of Istio CRD in future K8S releases:

Warning: admissionregistration.k8s.io/v1beta1 ValidatingWebhookConfiguration is deprecated in v1.16+, unavailable in v1.22+; use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration (repeated 1 times)

Did Istio control plane start successfully?

$ kubectl -n istio-system get pods

Are Istio CRD registered in the Kubernetes API?


$ kubectl get crds |grep -i istio
BarkingBad commented 3 years ago 
 aratajczak@aratajczak  ~  kubectl -n istio-system get pods                                                                                                                                1 ↵  873  16:40:26
NAME                                    READY   STATUS    RESTARTS   AGE
grafana-57cb8b8d44-7dp8s                1/1     Running   0          3m22s
istio-egressgateway-c5bc4f66-8gs5r      1/1     Running   0          3m30s
istio-ingressgateway-7c4d7d88d4-65nz9   1/1     Running   0          3m29s
istio-tracing-7fcc6f5848-5cdch          1/1     Running   0          3m22s
istiod-64878565f8-9x6kt                 1/1     Running   0          3m48s
kiali-6875bdf78-2758d                   1/1     Running   0          3m21s
prometheus-d8d9467dd-ll8nq              2/2     Running   0          3m21s
 aratajczak@aratajczak  ~  kubectl get crds |grep -i istio                                                                                                                                   ✔  874  16:40:28
adapters.config.istio.io                              2021-04-26T14:36:14Z
attributemanifests.config.istio.io                    2021-04-26T14:36:14Z
authorizationpolicies.security.istio.io               2021-04-26T14:36:14Z
clusterrbacconfigs.rbac.istio.io                      2021-04-26T14:36:15Z
destinationrules.networking.istio.io                  2021-04-26T14:36:15Z
envoyfilters.networking.istio.io                      2021-04-26T14:36:15Z
gateways.networking.istio.io                          2021-04-26T14:36:16Z
handlers.config.istio.io                              2021-04-26T14:36:16Z
httpapispecbindings.config.istio.io                   2021-04-26T14:36:16Z
httpapispecs.config.istio.io                          2021-04-26T14:36:17Z
instances.config.istio.io                             2021-04-26T14:36:17Z
meshpolicies.authentication.istio.io                  2021-04-26T14:36:17Z
peerauthentications.security.istio.io                 2021-04-26T14:36:18Z
policies.authentication.istio.io                      2021-04-26T14:36:18Z
quotaspecbindings.config.istio.io                     2021-04-26T14:36:18Z
quotaspecs.config.istio.io                            2021-04-26T14:36:19Z
rbacconfigs.rbac.istio.io                             2021-04-26T14:36:19Z
requestauthentications.security.istio.io              2021-04-26T14:36:19Z
rules.config.istio.io                                 2021-04-26T14:36:20Z
serviceentries.networking.istio.io                    2021-04-26T14:36:20Z
servicerolebindings.rbac.istio.io                     2021-04-26T14:36:20Z
serviceroles.rbac.istio.io                            2021-04-26T14:36:20Z
sidecars.networking.istio.io                          2021-04-26T14:36:21Z
templates.config.istio.io                             2021-04-26T14:36:21Z
virtualservices.networking.istio.io                   2021-04-26T14:36:21Z
bzurkowski commented 3 years ago

The above output is valid. The warnings subjected to this issue can be ignored.