I0430 16:26:20.648003 11692 request.go:655] Throttling request took 1.182909372s, request: GET:https://lb.kubesphere.local:6443/apis/rbac.authorization.k8s.io/v1beta1?timeout=32s
Name: istiod-1-6-10-5c8cc86fb4-hbb2f
Namespace: istio-system
Priority: 0
Node: <none>
Labels: app=istiod
istio=istiod
istio.io/rev=1-6-10
pod-template-hash=5c8cc86fb4
Annotations: sidecar.istio.io/inject: false
Status: Pending
IP:
IPs: <none>
Controlled By: ReplicaSet/istiod-1-6-10-5c8cc86fb4
Containers:
discovery:
Image: istio/pilot:1.6.10
Ports: 8080/TCP, 15010/TCP, 15017/TCP, 15053/TCP
Host Ports: 0/TCP, 0/TCP, 0/TCP, 0/TCP
Args:
discovery
--monitoringAddr=:15014
--log_output_level=default:info
--domain
cluster.local
--trust-domain=cluster.local
--keepaliveMaxServerConnectionAge
30m
Requests:
cpu: 500m
memory: 2Gi
Readiness: http-get http://:8080/ready delay=1s timeout=5s period=3s #success=1 #failure=3
Environment:
REVISION: 1-6-10
JWT_POLICY: first-party-jwt
PILOT_CERT_PROVIDER: istiod
POD_NAME: istiod-1-6-10-5c8cc86fb4-hbb2f (v1:metadata.name)
POD_NAMESPACE: istio-system (v1:metadata.namespace)
SERVICE_ACCOUNT: (v1:spec.serviceAccountName)
PILOT_TRACE_SAMPLING: 1
PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_OUTBOUND: true
PILOT_ENABLE_PROTOCOL_SNIFFING_FOR_INBOUND: true
INJECTION_WEBHOOK_CONFIG_NAME: istio-sidecar-injector-1-6-10
ISTIOD_ADDR: istiod-1-6-10.istio-system.svc:15012
PILOT_ENABLE_ANALYSIS: false
CLUSTER_ID: Kubernetes
CENTRAL_ISTIOD: false
Mounts:
/etc/cacerts from cacerts (ro)
/etc/istio/config from config-volume (rw)
/var/lib/istio/inject from inject (ro)
/var/run/secrets/istio-dns from local-certs (rw)
/var/run/secrets/kubernetes.io/serviceaccount from istiod-service-account-token-gq5sc (ro)
Conditions:
Type Status
PodScheduled False
Volumes:
local-certs:
Type: EmptyDir (a temporary directory that shares a pod's lifetime)
Medium: Memory
SizeLimit: <unset>
cacerts:
Type: Secret (a volume populated by a Secret)
SecretName: cacerts
Optional: true
inject:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-sidecar-injector-1-6-10
Optional: true
config-volume:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: istio-1-6-10
Optional: false
istiod-service-account-token-gq5sc:
Type: Secret (a volume populated by a Secret)
SecretName: istiod-service-account-token-gq5sc
Optional: false
QoS Class: Burstable
Node-Selectors: <none>
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning FailedScheduling 30m default-scheduler 0/3 nodes are available: 1 node(s) had taint {node-role.kubernetes.io/master: }, that the pod didn't tolerate, 2 Insufficient memory.
Warning FailedScheduling 30m default-scheduler 0/3 nodes are available: 1 node(s) had taint {node-role.kubernetes.io/master: }, that the pod didn't tolerate, 2 Insufficient memory.
Warning FailedScheduling 64s (x20 over 23m) default-scheduler 0/3 nodes are available: 1 node(s) had taint {node-role.kubernetes.io/master: }, that the pod didn't tolerate, 2 Insufficient memory.