Kubernetes Traefik入口仪表板返回404
我部署了Kubernetes Traefik入口仪表板返回404,kubernetes,amazon-elb,traefik,kubernetes-ingress,amazon-eks,Kubernetes,Amazon Elb,Traefik,Kubernetes Ingress,Amazon Eks,我部署了traefik入口控制器pod和两个服务,其中一个是LoadBalancer类型的反向代理,另一个是ClusterIP类型的仪表板 此外,我还创建入口,将所有/dashboard重定向到我的traefik dashboard 但由于某些原因,当我试图在aws ip/dashboard上请求仪表板时,收到404错误代码 这是我用来设置traefik的清单YAML --- apiVersion: v1 kind: ServiceAccount metadata: name: traefik
traefik入口控制器
pod和两个服务,其中一个是LoadBalancer
类型的反向代理,另一个是ClusterIP
类型的仪表板
此外,我还创建入口,将所有/dashboard
重定向到我的traefik dashboard
但由于某些原因,当我试图在aws ip/dashboard上请求仪表板时,收到404错误代码
这是我用来设置traefik的清单YAML
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: traefik-ingress-controller
namespace: kube-system
---
kind: Deployment
apiVersion: apps/v1
metadata:
name: traefik-ingress-controller
namespace: kube-system
labels:
k8s-app: traefik-ingress-lb
spec:
replicas: 1
selector:
matchLabels:
k8s-app: traefik-ingress-lb
template:
metadata:
labels:
k8s-app: traefik-ingress-lb
name: traefik-ingress-lb
spec:
serviceAccountName: traefik-ingress-controller
terminationGracePeriodSeconds: 60
containers:
- image: traefik
name: traefik-ingress-lb
ports:
- name: http
containerPort: 80
- name: admin
containerPort: 8080
args:
- --api
- --kubernetes
- --logLevel=INFO
---
kind: Service
apiVersion: v1
metadata:
name: traefik-ingress-service
namespace: kube-system
spec:
selector:
k8s-app: traefik-ingress-lb
ports:
- protocol: TCP
targetPort: 80
port: 80
type: LoadBalancer
---
kind: Service
apiVersion: v1
metadata:
name: traefik-web-ui
namespace: kube-system
spec:
selector:
k8s-app: traefik-ingress-lb
ports:
- name: web
port: 80
targetPort: 8080
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
namespace: kube-system
name: traefik-ingress
annotations:
kubernetes.io/ingress.class: traefik
spec:
rules:
- http:
paths:
- path: /dashboard
backend:
serviceName: traefik-web-ui
servicePort: web
更新 我正在查看日志,并在rbac激活和创建ClusterRole、ServiceRole和ServiceAccount时收到以下错误的通知:
E1124 18:56:23.267560 1 reflector.go:205] github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Endpoints: endpoints is forbidden: User "system:serviceaccount:kube-system:traefik-ingress" cannot list endpoints in the namespace "default"
E1124 18:56:23.648207 1 reflector.go:205] github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:serviceaccount:kube-system:traefik-ingress" cannot list services in the namespace "default"
E1124 18:56:23.267560 1 reflector.go:205] github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Endpoints: endpoints is forbidden: User "system:serviceaccount:kube-system:traefik-ingress" cannot list endpoints in the namespace "default"
这是我的serviceAccount、clusterRole和RoleBingind
kind: ServiceAccount
apiVersion: v1
metadata:
name: traefik-ingress
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: traefik-ingress
rules:
- apiGroups:
- ""
resources:
- pods
- services
- endpoints
- secrets
verbs:
- get
- list
- watch
- apiGroups:
- extensions
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- extensions
resources:
- ingresses/status
verbs:
- update
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: traefik-ingress
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: traefik-ingress
subjects:
- kind: ServiceAccount
name: traefik-ingress
namespace: default
我自己也试过。因此,基本上,当您创建入口时,它是使用
traefik ui.minikube
(默认值)的主机创建的,因此您将无法使用/dashboard/
访问仪表板
您必须使用traefikui.minikube/dashboard/
访问它。例如:
$ kubectl -n kube-system get ingress
NAME HOSTS ADDRESS PORTS AGE
traefik-ingress * 80 8m13s
traefik-web-ui traefik-ui.minikube xxxx.elb.amazonaws.com 80 71d
$ curl -H 'Host: traefik-ui.minikube' xxxx.elb.amazonaws.com/dashboard/
<!doctype html><html class="has-navbar-fixed-top">
...
</html>
您还可以在入口定义中使用主机
到规则
:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
namespace: kube-system
name: traefik-ingress
annotations:
kubernetes.io/ingress.class: traefik
spec:
rules:
- host: yourown.hostname.com
http:
paths:
- path: /dashboard
backend:
serviceName: traefik-web-ui
servicePort: web
解决方案
我用这个
kubectl create serviceaccount --namespace kube-system tiller
kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'
然后安装带头盔的stable/traefik模板
helm install stable/traefik --name=traefik-ingress-controller --values values.yaml
values.yaml文件是:
仪表板:
已启用:true
域:traefik-ui.k8s.io
rbac:
已启用:true
库伯内特斯:
名称空间:
-违约
-库贝系统
谢谢你的帮助当我点击http://..elb.amazonaws.com/dashboard/
我应用了该配置,但仍然得到了404。。。当执行kubectl get ingress-n kube system
时,地址列为空:假设解决我的Traefiku负载平衡器服务更新我的问题您使用哪一版本的Traefik?@Nepomucen Traefik 1.7谢谢!这最终解决了我一直面临的一个问题。我怀疑真正的问题在于我的helm install命令中没有rbac.enabled=true。我的额头撞在桌子上疼!我很高兴能帮助别人:)
helm install stable/traefik --name=traefik-ingress-controller --values values.yaml