无法在 minikube 集群上安装 istio

Question

在 WSL 2 上的 minikube 集群上安装 isito 时，Istiod 和 Ingressgw 未安装。我安装 minikube 是为了使用 containerd。描述 istiod pod 时看到如下错误。这是

kubectl describe pod -n istio-system istiod-7fb4bc46ff-crt9w

的输出

Events:
  Type     Reason     Age                  From               Message
  ----     ------     ----                 ----               -------
  Normal   Scheduled  11m                  default-scheduler  Successfully assigned istio-system/istiod-7fb4bc46ff-crt9w to minikube
  Normal   Pulling    10m (x4 over 11m)    kubelet            Pulling image "docker.io/istio/pilot:1.16.1"
  Warning  Failed     10m (x4 over 11m)    kubelet            Failed to pull image "docker.io/istio/pilot:1.16.1": rpc error: code = Unknown desc = failed to pull and unpack image "docker.io/istio/pilot:1.16.1": failed to resolve reference "docker.io/istio/pilot:1.16.1": failed to authorize: failed to fetch anonymous token: Get "https://auth.docker.io/token?scope=repository%3Aistio%2Fpilot%3Apull&service=registry.docker.io": x509: certificate signed by unknown authority
  Warning  Failed     10m (x4 over 11m)    kubelet            Error: ErrImagePull
  Warning  Failed     10m (x6 over 11m)    kubelet            Error: ImagePullBackOff
  Normal   BackOff    112s (x42 over 11m)  kubelet            Back-off pulling image "docker.io/istio/pilot:1.16.1"

#kubectl get all --all-namespaces
NAMESPACE      NAME                                   READY   STATUS             RESTARTS      AGE
istio-system   pod/istiod-7fb4bc46ff-crt9w            0/1     ImagePullBackOff   0             49m
kube-system    pod/coredns-787d4945fb-cqgrq           1/1     Running            0             51m
kube-system    pod/etcd-minikube                      1/1     Running            0             51m
kube-system    pod/kindnet-w8t78                      1/1     Running            0             51m
kube-system    pod/kube-apiserver-minikube            1/1     Running            0             51m
kube-system    pod/kube-controller-manager-minikube   1/1     Running            0             51m
kube-system    pod/kube-proxy-k72t7                   1/1     Running            0             51m
kube-system    pod/kube-scheduler-minikube            1/1     Running            0             51m
kube-system    pod/storage-provisioner                1/1     Running            1 (51m ago)   51m

NAMESPACE      NAME                 TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                                 AGE
default        service/kubernetes   ClusterIP   10.96.0.1        <none>        443/TCP                                 51m
istio-system   service/istiod       ClusterIP   10.105.148.207   <none>        15010/TCP,15012/TCP,443/TCP,15014/TCP   49m
kube-system    service/kube-dns     ClusterIP   10.96.0.10       <none>        53/UDP,53/TCP,9153/TCP                  51m

NAMESPACE     NAME                        DESIRED   CURRENT   READY   UP-TO-DATE   AVAILABLE   NODE SELECTOR            AGE
kube-system   daemonset.apps/kindnet      1         1         1       1            1           <none>                   51m
kube-system   daemonset.apps/kube-proxy   1         1         1       1            1           kubernetes.io/os=linux   51m

NAMESPACE      NAME                      READY   UP-TO-DATE   AVAILABLE   AGE
istio-system   deployment.apps/istiod    0/1     1            0           49m
kube-system    deployment.apps/coredns   1/1     1            1           51m

NAMESPACE      NAME                                 DESIRED   CURRENT   READY   AGE
istio-system   replicaset.apps/istiod-7fb4bc46ff    1         1         0       49m
kube-system    replicaset.apps/coredns-787d4945fb   1         1         1       51m

NAMESPACE      NAME                                         REFERENCE           TARGETS         MINPODS   MAXPODS   REPLICAS   AGE
istio-system   horizontalpodautoscaler.autoscaling/istiod   Deployment/istiod   <unknown>/80%   1         5         1          49m

我能够在同一张图片上做

docker pull

，而且效果很好。此外，当我尝试使用 docker 作为容器运行时而不是 containerd 运行 minikube 时，

mikube start

失败了。

istioctl x precheck

没问题。可能需要对 WSL2 做一些事情并使用公司 VPN。

我使用 docker pull 手动拉取镜像，但仍然出现镜像拉回错误。如前所述，我使用 docker pull 成功地拉取了镜像。