在虚拟机上的卷上设置了 Tanzu Kubernetes NotAuthenticated

Question

我正在开发环境中运行全新的 Tanzu kubernetes 集群。我正在尝试安装 MS SQL Server 2019，但在应用清单后遇到了此错误。

SQLserver pod 失败并显示以下信息：

ltkc-workers-mpqdb-556696d6f6-rhpsw
  Warning  FailedMount         50s                  kubelet, sqltkc-workers-mpqdb-556696d6f6-rhpsw  Unable to attach or mount volumes: unmounted volumes=[mssql-persistent-storage], unattached volumes=[default-token-qzt5k mssql-persistent-storage]: timed out waiting for the condition

  Warning  FailedAttachVolume  45s (x9 over 2m53s)  attachdetach-controller                         AttachVolume.Attach failed for volume "pvc-697e8f96-a23b-4255-9b19-fa04aeed98ee" : rpc error: code = Internal desc = observed Error: "ServerFaultCode: NotAuthenticated" is set on the volume "fbc91ad5-b62e-4bec-8132-4f2d1c5160f0-697e8f96-a23b-4255-9b19-fa04aeed98ee" on virtualmachine "sqltkc-workers-mpqdb-556696d6f6-rhpsw"

pv和pvc都绑定了：

NAME                                                        CAPACITY   ACCESS MODES   RECLAIM POLICY   STATUS   CLAIM                      STORAGECLASS   REASON   AGE
persistentvolume/pvc-697e8f96-a23b-4255-9b19-fa04aeed98ee   10Gi       RWO            Delete           Bound    default/mssql-data-claim   pstore-high             67m

NAME                                     STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS   AGE
persistentvolumeclaim/mssql-data-claim   Bound    pvc-697e8f96-a23b-4255-9b19-fa04aeed98ee   10Gi       RWO            pstore-high    67m

部署清单正是我从其他各种教程中从网上下载的：

apiVersion: v1
kind: Service
metadata:
  name: mssql-deployment
spec:
  selector:
    app: mssql
  ports:
    - protocol: TCP
      port: 1433
      targetPort: 1433
  type: LoadBalancer
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: mssql-deployment
spec:
  replicas: 1
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxUnavailable: 1
      maxSurge: 0
  selector:
    matchLabels:
      app: mssql
  template:
    metadata:
      labels:
        app: mssql
    spec:
      terminationGracePeriodSeconds: 10
      securityContext:
        fsGroup: 1000
      restartPolicy: Always
      containers:
      - name: mssql
        resources:
          requests:
            memory: 8000Mi
        image: mcr.microsoft.com/mssql/server:2019-latest
        ports:
        - containerPort: 1433
        env:
        - name: MSSQL_PID
          value: "Developer"
        - name: ACCEPT_EULA
          value: "Y"
        - name: SA_PASSWORD
          value: VMware123!
        volumeMounts:
        - name: mssql-persistent-storage
          mountPath: /var/opt/mssql
      volumes:
      - name: mssql-persistent-storage
        persistentVolumeClaim:
          claimName: mssql-data-claim

这是 PVC yaml：

kind: PersistentVolumeClaim
metadata:
  name: mssql-data-claim
spec:
  accessModes:
  - ReadWriteOnce
#  storageClassName: vsan-default-storage-policy
  storageClassName: pstore-high
  resources:
   requests:
    storage: 10Gi

存储类别存在。我已尝试使用默认 vSAN 和其他存储类别进行此操作，并且总是遇到相同的卷身份验证问题。

Answer 1

我们的团队能够解决这个问题。我们发现我们的 vCenter root 密码已过期。一旦我们重置密码，我们的持久卷就能够挂载到容器而不会出现任何错误。如果您正在运行 Tanzu，强烈建议您确保您的 vCenter 已完全更新。