ExternalControlPlaneAddressIsNotAHostname

消息名称ExternalControlPlaneAddressIsNotAHostname
消息代码IST0164
描述Address for the ingress gateway on the external control plane is an IP address and not a hostname
等级Info

当为外部控制平面上的入口网关提供的地址是 IP 地址而不是主机名时，会出现此消息。

示例

当您的集群具有以下 ValidatingWebhookConfiguration 和 MutatingWebhookConfiguration（为清楚起见而缩短）时：

  1. apiVersion: admissionregistration.k8s.io/v1
  2. kind: ValidatingWebhookConfiguration
  3. metadata:
  4.   name: istio-validator-external-istiod
  5. webhooks:
  6. - admissionReviewVersions:
  7.   - v1beta1
  8.   - v1
  9.   clientConfig:
  10.     url: https://test.com:15017/validate
  11.   name: rev.validation.istio.io
  13. ---
  14. apiVersion: admissionregistration.k8s.io/v1
  15. kind: ValidatingWebhookConfiguration
  16. metadata:
  17.   name: istiod-default-validator
  18. webhooks:
  19. - admissionReviewVersions:
  20.   - v1beta1
  21.   - v1
  22.   clientConfig:
  23.     url: https://test.com:15017/validate
  24.   failurePolicy: Ignore
  25.   name: validation.istio.io
  27. ---
  28. apiVersion: admissionregistration.k8s.io/v1
  29. kind: MutatingWebhookConfiguration
  30. metadata:
  31.   name: istio-sidecar-injector-external-istiod
  32. webhooks:
  33. - admissionReviewVersions:
  34.   - v1beta1
  35.   - v1
  36.   clientConfig:
  37.     url: https://999.999.999.999:5100/inject/cluster/your-cluster-name/net/network1
  38.   failurePolicy: Fail
  39.   name: rev.namespace.sidecar-injector.istio.io
  40. - admissionReviewVersions:
  41.   - v1beta1
  42.   - v1
  43.   clientConfig:
  44.     url: https://test.com/inject/cluster/your-cluster-name/net/network1
  45.   failurePolicy: Fail
  46.   name: rev.object.sidecar-injector.istio.io
  47. - admissionReviewVersions:
  48.   - v1beta1
  49.   - v1
  50.   clientConfig:
  51.     url: https://test.com/inject/cluster/your-cluster-name/net/network1
  52.   failurePolicy: Fail
  53.   name: namespace.sidecar-injector.istio.io
  54. - admissionReviewVersions:
  55.   - v1beta1
  56.   - v1
  57.   clientConfig:
  58.     url: https://test.com/inject/cluster/your-cluster-name/net/network1
  59.   failurePolicy: Fail
  60.   name: object.sidecar-injector.istio.io

您将收到此消息：

  1. Info [IST0164] (MutatingWebhookConfiguration istio-sidecar-injector-external-istiod testing.yml:28) The address (https://999.999.999.999:5100/inject/cluster/your-cluster-name/net/network1) that was provided for the webhook (rev.namespace.sidecar-injector.istio.io) to reach the ingress gateway on the external control plane cluster is an IP address. This is not recommended for a production environment.

如何修复

不建议在生产环境中为在外部控制平面中运行的入口网关使用 IP 地址而不是主机名。

如果您使用的是生产环境，修复这条信息类消息的方式为：将此地址更改为一个有效的主机名， 将其解析为入口网关的 IP 地址。

有关使用带有 TLS 的公共主机名公开入口网关服务的说明， 请参阅此处。