minikube 安装 Kubernetes ingress 插件报错 timed out waiting for the condition

查看列表

minikube addons list

启用 ingress

minikube addons enable ingress

错误信息

安装超时，具体错误信息如下：

PS C:> minikube addons enable ingress
    ▪ Using image registry.cn-hangzhou.aliyuncs.com/google_containers/kube-webhook-certgen:v1.1.1
    ▪ Using image registry.cn-hangzhou.aliyuncs.com/google_containers/kube-webhook-certgen:v1.1.1
    ▪ Using image registry.cn-hangzhou.aliyuncs.com/google_containers/nginx-ingress-controller:v1.2.1
🔎  Verifying ingress addon...

❌  Exiting due to MK_ADDON_ENABLE: run callbacks: running callbacks: [waiting for app.kubernetes.io/name=ingress-nginx pods: timed out waiting for the condition]

0/1 nodes are available: 1 node(s) didn't match Pod's node affinity/selector. preemption: 0/1 nodes are available: 1 Preemption is not helpful for scheduling

查看 Pod 描述

错误信息如下：

Failed to pull image "registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.3.0@sha256:549e71a6ca248c5abd51cdb73dbc3083df62cf92ed5e6147c780e30f7e007a47": rpc error: code = Unknown desc = Error response from daemon: Get "https://registry.k8s.io/v2/": 
x509: certificate signed by unknown authority

原因

Docker拉取镜像时证书校验不通过。

解决方法

使用minikube创建Kubernetes集群时，添加--insecure-registry

--insecure-registry=registry.cn-hangzhou.aliyuncs.com --insecure-registry=registry.k8s.io

完整 minikube 创建集群命令

minikube start --vm-driver="hyperv" --memory=4096 --hyperv-virtual-switch="Default Switch" --image-mirror-country="cn" --registry-mirror=https://hub-mirror.c.163.com --registry-mirror=https://docker.mirrors.ustc.edu.cn --image-repository=registry.cn-hangzhou.aliyuncs.com/google_containers --insecure-registry=registry.cn-hangzhou.aliyuncs.com --insecure-registry=registry.k8s.io