Nginx Ingress故障：修复默认伪证书路径权限问题

我肥我任性

已于 2024-09-11 21:01:25 修改

阅读量376

点赞数 1

分类专栏：工作问题文章标签： nginx 运维 k8s

于 2024-09-11 10:05:17 首次发布

本文链接：https://blog.csdn.net/yefengyun241/article/details/142130287

版权

工作问题专栏收录该内容

1 篇文章 0 订阅

订阅专栏

报错如下：

-------------------------------------------------------------------------------
NGINX Ingress controller
  Release:       0.26.1
  Build:         git-2de5a893a
  Repository:    https://github.com/kubernetes/ingress-nginx
  nginx version: openresty/1.15.8.2

-------------------------------------------------------------------------------

W0719 06:58:01.543840       6 flags.go:243] SSL certificate chain completion is disabled (--enable-ssl-chain-completion=false)
W0719 06:58:01.544045       6 client_config.go:541] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0719 06:58:01.544341       6 main.go:182] Creating API client for https://10.233.0.1:443
I0719 06:58:01.558257       6 main.go:226] Running in Kubernetes cluster version v1.16 (v1.16.3) - git (clean) commit b3cbbae08ec52a7fc73d334838e18d17e8512749 - platform linux/amd64
F0719 06:58:01.857260       6 ssl.go:389] unexpected error storing fake SSL Cert: could not create PEM certificate file /etc/ingress-controller/ssl/default-fake-certificate.pem: open /etc/ingress-controller/ssl/default-fake-certificate.pem: permission denied

解决方法：

将runAsUser改成0

spec:
  template:
    spec:
      containers:
      - securityContext:
          runAsUser: 0
          privileged: true
          allowPrivilegeEscalation: true