**已关闭。**此问题为not about programming or software development。当前不接受答案。
此问题似乎与a specific programming problem, a software algorithm, or software tools primarily used by programmers无关。如果您认为此问题与another Stack Exchange site的主题有关,您可以留下评论,说明在何处可以回答此问题。
3天前关闭。
Improve this question
我正在使用aws EKS来部署我的应用程序。有一个公共子网,其中有一个节点组。然后有一个私有子网,其中也有一个节点组。在我开始使用EFS之前,一切都很好。efs csi驱动程序的pod不会在私有子网节点上启动。pod将给予以下描述:
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 4m44s default-scheduler Successfully assigned kube-system/efs-csi-node-t79j6 to ip-192-168-93-186.ap-south-1.compute.internal
Normal Pulling 4m44s kubelet Pulling image "602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/aws-efs-csi-driver:v1.0.0"
Warning Failed 2m28s kubelet Failed to pull image "602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/aws-efs-csi-driver:v1.0.0":
rpc error: code = Unknown desc = Error response from daemon: Get https://602401143452.dkr.ecr.us-west-2.amazonaws.com/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
Warning Failed 2m28s kubelet Error: ErrImagePull
Normal Pulling 2m28s kubelet Pulling image "602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/csi-node-driver-registrar:v1.3.0"
Warning Failed 13s kubelet Failed to pull image
"602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/csi-node-driver-registrar:v1.3.0": rpc error: code = Unknown desc = Error response from daemon:
Get https://602401143452.dkr.ecr.us-west-2.amazonaws.com/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
Warning Failed 13s kubelet Error: ErrImagePull
Normal Pulling 13s kubelet Pulling image
"602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/livenessprobe:v2.0.0"
当另一个efs CSI驱动程序pod在公共子网节点上成功启动时。我认为它无法拉取映像,因为私有节点上没有Internet连接,但即使在提供Internet网关后,我也看到了同样的问题。请对此提出一些解决方案。这是用于启动驱动程序pod的命令:
kubectl应用程序-k“github.com/kubernetes-sigs/aws-efs-csi-driver/deploy/kubernetes/overlays/stable/ecr/?ref=release-1.0“
2条答案
按热度按时间sycxhyv71#
您需要做的就是更新区域,存储库的默认区域为us-west-2,因此如果您从不同的区域访问图像,则会收到imagepullbackoff错误。
kubectl编辑守护进程集/efs-csi-node -n kube系统
然后用efs-csi守护进程集中指定的所有3个映像的eks区域更新它。
oalqel3c2#
检查连接到EFS的安全组的入站规则中端口# 2049是否打开。