AWS EKS - 创建负载均衡器 controller 失败

Question

我正在尝试通过以下链接在我的 EKS 集群上创建应用程序负载均衡器 controller

当我运行这些步骤时（在对下载的 yaml 文件进行必要的更改之后）

curl -o v2_1_2_full.yaml https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.1.2/docs/install/v2_1_2_full.yaml
kubectl apply -f v2_1_2_full.yaml

我得到这个 output

customresourcedefinition.apiextensions.k8s.io/targetgroupbindings.elbv2.k8s.aws configured
mutatingwebhookconfiguration.admissionregistration.k8s.io/aws-load-balancer-webhook configured
role.rbac.authorization.k8s.io/aws-load-balancer-controller-leader-election-role unchanged
clusterrole.rbac.authorization.k8s.io/aws-load-balancer-controller-role configured
rolebinding.rbac.authorization.k8s.io/aws-load-balancer-controller-leader-election-rolebinding unchanged
clusterrolebinding.rbac.authorization.k8s.io/aws-load-balancer-controller-rolebinding unchanged
service/aws-load-balancer-webhook-service unchanged
deployment.apps/aws-load-balancer-controller unchanged
validatingwebhookconfiguration.admissionregistration.k8s.io/aws-load-balancer-webhook configured
Error from server (InternalError): error when creating "v2_1_2_full.yaml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": Post https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s: no endpoints available for service "cert-manager-webhook"
Error from server (InternalError): error when creating "v2_1_2_full.yaml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": Post https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s: no endpoints available for service "cert-manager-webhook"

负载均衡器 controller 似乎因此没有启动，并且永远不会准备好 state

有没有人对如何解决这个问题有任何建议？

Answer 1

原来我的节点组上的 tains 阻止了 cert-manager pod 在任何节点上启动

这些命令有助于调试并引导我修复此问题

kubectl get po -n cert-manager
kubectl describe po <pod id> -n cert-manager

我的解决方案是创建另一个没有指定污点的节点组，这允许证书管理器运行