kubernetes 控制器编写不同的API版本破坏SSA差异分析

wpx232ag  于 6个月前  发布在  Kubernetes
关注(0)|答案(6)|浏览(57)

发生了什么？
我有两个控制器：

  • 一个对资源进行版本为 "v1" 的 SSA(Static Set Action)操作
  • 一个对资源 /status 进行版本为 v1beta1 的 PUT 操作

每次 SSA 操作执行全量写入时，都会递增 resourceVersion,导致无限循环，因为它们不断应用。
如果两者使用相同的版本，就不会发生这种情况。

你期望会发生什么？
SSA 调用(不修改任何内容)是一个 NOP(无操作)。

我们如何尽可能最小化地重现它？
抱歉，这不是一个 最小 的复现器，但应该很容易做到：
spec.yaml

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: hyper
  namespace: default
  annotations:
    networking.istio.io/service-type: "ClusterIP"
  ownerReferences:
    - apiVersion: networking.example.io/v1
      kind: SuperService
      name: hyper
      uid: "c5725128-104a-4c64-968b-4565a090d520"
spec:
  gatewayClassName: istio
  infrastructure:
    annotations:
      proxy.istio.io/config: |-
proxyMetadata:
ENABLE_HBONE: "false"
  listeners:
    - name: "http"
      port: 80
      protocol: HTTP
      allowedRoutes:
        namespaces:
          from: Same
    - name: "hyper-https"
      protocol: HTTPS
      allowedRoutes:
        namespaces:
          from: Same
      port: 443
      tls:
        mode: Terminate
        certificateRefs:
        - name: hyper-tls
          group: ""
          kind: Secret

status.yaml

apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  annotations:
    gateway.istio.io/controller-version: '5'
    networking.istio.io/service-type: ClusterIP
  creationTimestamp: null
  name: hyper
  namespace: default
  ownerReferences:
  - apiVersion: networking.example.io/v1
    kind: SuperService
    name: hyper
    uid: c5725128-104a-4c64-968b-4565a090d520
  resourceVersion: '384735'
  uid: 5dc737e6-2a53-4c48-9c66-555f8c534dd9
spec:
  gatewayClassName: ''
  listeners: null
status:
  addresses:
  - type: Hostname
    value: hyper-istio.default.svc.cluster.local
  - type: IPAddress
    value: 10.96.212.50
  conditions:
  - lastTransitionTime: '2023-11-30T21:18:10Z'
    message: Resource accepted
    observedGeneration: 1
    reason: Accepted
    status: 'True'
    type: Accepted
  - lastTransitionTime: '2023-11-30T21:18:10Z'
    message: Resource programmed, assigned to service(s) hyper-istio.default.svc.cluster.local:443
      and hyper-istio.default.svc.cluster.local:80
    observedGeneration: 1
    reason: Programmed
    status: 'True'
    type: Programmed
  listeners:
  - attachedRoutes: 1
    conditions:
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: No errors found
      observedGeneration: 1
      reason: Accepted
      status: 'True'
      type: Accepted
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: No errors found
      observedGeneration: 1
      reason: NoConflicts
      status: 'False'
      type: Conflicted
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: No errors found
      observedGeneration: 1
      reason: Programmed
      status: 'True'
      type: Programmed
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: No errors found
      observedGeneration: 1
      reason: ResolvedRefs
      status: 'True'
      type: ResolvedRefs
    name: http
    supportedKinds:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
    - group: gateway.networking.k8s.io
      kind: GRPCRoute
  - attachedRoutes: 1
    conditions:
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: No errors found
      observedGeneration: 1
      reason: Accepted
      status: 'True'
      type: Accepted
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: No errors found
      observedGeneration: 1
      reason: NoConflicts
      status: 'False'
      type: Conflicted
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: Bad TLS configuration
      observedGeneration: 1
      reason: Invalid
      status: 'False'
      type: Programmed
    - lastTransitionTime: '2023-11-30T21:18:10Z'
      message: invalid certificate reference /Secret/hyper-tls., secret default/hyper-tls
        not found
      observedGeneration: 1
      reason: InvalidCertificateRef
      status: 'False'
      type: ResolvedRefs
    name: hyper-https
    supportedKinds:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
    - group: gateway.networking.k8s.io
      kind: GRPCRoute

然后，在之间交替执行以下操作：

  • kubectl apply --server-side spec.yaml
  • curl /apis/gateway.networking.k8s.io/v1beta1/namespaces/default/gateways/hyper/status -X PUT -d @status.yaml -H "Content-type: application/yaml"(在 status.yaml 中更新 resourceVersion)。

每次你都会看到对象发生变化。下面是在应用前后的对比：
应用后

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  annotations:
    gateway.istio.io/controller-version: "5"
    networking.istio.io/service-type: ClusterIP
  creationTimestamp: "2023-11-30T21:18:10Z"
  generation: 1
  managedFields:
  - apiVersion: gateway.networking.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:gateway.istio.io/controller-version: {}
    manager: istio.io/gateway-controller
    operation: Apply
    time: "2023-11-30T21:18:10Z"
  - apiVersion: gateway.networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:networking.istio.io/service-type: {}
        f:ownerReferences:
          k:{"uid":"c5725128-104a-4c64-968b-4565a090d520"}: {}
      f:spec:
        f:gatewayClassName: {}
        f:infrastructure:
          f:annotations:
            f:proxy.istio.io/config: {}
        f:listeners:
          k:{"name":"http"}:
            .: {}
            f:allowedRoutes:
              f:namespaces:
                f:from: {}
            f:name: {}
            f:port: {}
            f:protocol: {}
          k:{"name":"hyper-https"}:
            .: {}
            f:allowedRoutes:
              f:namespaces:
                f:from: {}
            f:name: {}
            f:port: {}
            f:protocol: {}
            f:tls:
              f:certificateRefs: {}
              f:mode: {}
    manager: kubectl
    operation: Apply
    time: "2023-11-30T21:18:10Z"
  - apiVersion: gateway.networking.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:addresses: {}
        f:conditions:
          k:{"type":"Accepted"}:
            f:lastTransitionTime: {}
            f:message: {}
            f:observedGeneration: {}
            f:reason: {}
            f:status: {}
          k:{"type":"Programmed"}:
            f:lastTransitionTime: {}
            f:message: {}
            f:observedGeneration: {}
            f:reason: {}
            f:status: {}
        f:listeners:
          .: {}
          k:{"name":"http"}:
            .: {}
            f:attachedRoutes: {}
            f:conditions:
              .: {}
              k:{"type":"Accepted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Conflicted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Programmed"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"ResolvedRefs"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
            f:name: {}
            f:supportedKinds: {}
          k:{"name":"hyper-https"}:
            .: {}
            f:attachedRoutes: {}
            f:conditions:
              .: {}
              k:{"type":"Accepted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Conflicted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Programmed"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"ResolvedRefs"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
            f:name: {}
            f:supportedKinds: {}
    manager: pilot-discovery
    operation: Update
    subresource: status
    time: "2023-11-30T21:18:10Z"
  name: hyper
  namespace: default
  ownerReferences:
  - apiVersion: networking.example.io/v1
    kind: SuperService
    name: hyper
    uid: c5725128-104a-4c64-968b-4565a090d520
  resourceVersion: "384735"
  uid: 5dc737e6-2a53-4c48-9c66-555f8c534dd9
spec:
  gatewayClassName: istio
  infrastructure:
    annotations:
      proxy.istio.io/config: |-
proxyMetadata:
ENABLE_HBONE: "false"
  listeners:
  - allowedRoutes:
      namespaces:
        from: Same
    name: http
    port: 80
    protocol: HTTP
  - allowedRoutes:
      namespaces:
        from: Same
    name: hyper-https
    port: 443
    protocol: HTTPS
    tls:
      certificateRefs:
      - group: ""
        kind: Secret
        name: hyper-tls
      mode: Terminate
status:
  addresses:
  - type: Hostname
    value: hyper-istio.default.svc.cluster.local
  - type: IPAddress
    value: 10.96.212.50
  conditions:
  - lastTransitionTime: "2023-11-30T21:18:10Z"
    message: Resource accepted
    observedGeneration: 1
    reason: Accepted
    status: "True"
    type: Accepted
  - lastTransitionTime: "2023-11-30T21:18:10Z"
    message: Resource programmed, assigned to service(s) hyper-istio.default.svc.cluster.local:443
      and hyper-istio.default.svc.cluster.local:80
    observedGeneration: 1
    reason: Programmed
    status: "True"
    type: Programmed
  listeners:
  - attachedRoutes: 1
    conditions:
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: NoConflicts
      status: "False"
      type: Conflicted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: Programmed
      status: "True"
      type: Programmed
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: ResolvedRefs
      status: "True"
      type: ResolvedRefs
    name: http
    supportedKinds:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
    - group: gateway.networking.k8s.io
      kind: GRPCRoute
  - attachedRoutes: 1
    conditions:
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: NoConflicts
      status: "False"
      type: Conflicted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: Bad TLS configuration
      observedGeneration: 1
      reason: Invalid
      status: "False"
      type: Programmed
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: invalid certificate reference /Secret/hyper-tls., secret default/hyper-tls
        not found
      observedGeneration: 1
      reason: InvalidCertificateRef
      status: "False"
      type: ResolvedRefs
    name: hyper-https
    supportedKinds:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
    - group: gateway.networking.k8s.io
      kind: GRPCRoute

状态更新后

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  annotations:
    gateway.istio.io/controller-version: "5"
    networking.istio.io/service-type: ClusterIP
  creationTimestamp: "2023-11-30T21:18:10Z"
  generation: 1
  managedFields:
  - apiVersion: gateway.networking.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:gateway.istio.io/controller-version: {}
    manager: istio.io/gateway-controller
    operation: Apply
    time: "2023-11-30T21:18:10Z"
  - apiVersion: gateway.networking.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:networking.istio.io/service-type: {}
        f:ownerReferences:
          k:{"uid":"c5725128-104a-4c64-968b-4565a090d520"}: {}
    manager: kubectl
    operation: Apply
    time: "2023-11-30T21:18:10Z"
  - apiVersion: gateway.networking.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:addresses: {}
        f:conditions:
          k:{"type":"Accepted"}:
            f:lastTransitionTime: {}
            f:message: {}
            f:observedGeneration: {}
            f:reason: {}
            f:status: {}
          k:{"type":"Programmed"}:
            f:lastTransitionTime: {}
            f:message: {}
            f:observedGeneration: {}
            f:reason: {}
            f:status: {}
        f:listeners:
          .: {}
          k:{"name":"http"}:
            .: {}
            f:attachedRoutes: {}
            f:conditions:
              .: {}
              k:{"type":"Accepted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Conflicted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Programmed"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"ResolvedRefs"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
            f:name: {}
            f:supportedKinds: {}
          k:{"name":"hyper-https"}:
            .: {}
            f:attachedRoutes: {}
            f:conditions:
              .: {}
              k:{"type":"Accepted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Conflicted"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"Programmed"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
              k:{"type":"ResolvedRefs"}:
                .: {}
                f:lastTransitionTime: {}
                f:message: {}
                f:observedGeneration: {}
                f:reason: {}
                f:status: {}
                f:type: {}
            f:name: {}
            f:supportedKinds: {}
    manager: pilot-discovery
    operation: Update
    subresource: status
    time: "2023-11-30T21:18:10Z"
  name: hyper
  namespace: default
  ownerReferences:
  - apiVersion: networking.example.io/v1
    kind: SuperService
    name: hyper
    uid: c5725128-104a-4c64-968b-4565a090d520
  resourceVersion: "384769"
  uid: 5dc737e6-2a53-4c48-9c66-555f8c534dd9
spec:
  gatewayClassName: istio
  infrastructure:
    annotations:
      proxy.istio.io/config: |-
proxyMetadata:
ENABLE_HBONE: "false"
  listeners:
  - allowedRoutes:
      namespaces:
        from: Same
    name: http
    port: 80
    protocol: HTTP
  - allowedRoutes:
      namespaces:
        from: Same
    name: hyper-https
    port: 443
    protocol: HTTPS
    tls:
      certificateRefs:
      - group: ""
        kind: Secret
        name: hyper-tls
      mode: Terminate
status:
  addresses:
  - type: Hostname
    value: hyper-istio.default.svc.cluster.local
  - type: IPAddress
    value: 10.96.212.50
  conditions:
  - lastTransitionTime: "2023-11-30T21:18:10Z"
    message: Resource accepted
    observedGeneration: 1
    reason: Accepted
    status: "True"
    type: Accepted
  - lastTransitionTime: "2023-11-30T21:18:10Z"
    message: Resource programmed, assigned to service(s) hyper-istio.default.svc.cluster.local:443
      and hyper-istio.default.svc.cluster.local:80
    observedGeneration: 1
    reason: Programmed
    status: "True"
    type: Programmed
  listeners:
  - attachedRoutes: 1
    conditions:
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: NoConflicts
      status: "False"
      type: Conflicted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: Programmed
      status: "True"
      type: Programmed
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: ResolvedRefs
      status: "True"
      type: ResolvedRefs
    name: http
    supportedKinds:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
    - group: gateway.networking.k8s.io
      kind: GRPCRoute
  - attachedRoutes: 1
    conditions:
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: Accepted
      status: "True"
      type: Accepted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: No errors found
      observedGeneration: 1
      reason: NoConflicts
      status: "False"
      type: Conflicted
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: Bad TLS configuration
      observedGeneration: 1
      reason: Invalid
      status: "False"
      type: Programmed
    - lastTransitionTime: "2023-11-30T21:18:10Z"
      message: invalid certificate reference /Secret/hyper-tls., secret default/hyper-tls
        not found
      observedGeneration: 1
      reason: InvalidCertificateRef
      status: "False"
      type: ResolvedRefs
    name: hyper-https
    supportedKinds:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
    - group: gateway.networking.k8s.io
      kind: GRPCRoute

差异：

27,51d26
<       f:spec:
<         f:gatewayClassName: {}
<         f:infrastructure:
<           f:annotations:
<             f:proxy.istio.io/config: {}
<         f:listeners:
<           k:{"name":"http"}:
<             .: {}
<             f:allowedRoutes:
<               f:namespaces:
<                 f:from: {}
<             f:name: {}
<             f:port: {}
<             f:protocol: {}
<           k:{"name":"hyper-https"}:
<             .: {}
<             f:allowedRoutes:
<               f:namespaces:
<                 f:from: {}
<             f:name: {}
<             f:port: {}
<             f:protocol: {}
<             f:tls:
<               f:certificateRefs: {}
<               f:mode: {}
164c139
<   resourceVersion: "384735"
---
>   resourceVersion: "384769"

基本上，当我们进行状态更新时，spec 被移除。

我们需要了解其他信息吗？

  • 无响应*

Kubernetes 版本：

$ kubectl version
v1.28.0

云提供商：kind
操作系统版本：

# On Linux:
$ cat /etc/os-release
# paste output here
$ uname -a
# paste output here

# On Windows:
C:\> wmic os get Caption, Version, BuildNumber, OSArchitecture
# paste output here

安装工具：
容器运行时(CRI)和版本(如适用):
相关插件(CNI、CSI 等)和版本(如适用):

kubernetes

6条答案

按热度按时间
w9apscun

w9apscun1#

/sig api-machinery
cc @apelisse

赞(0）分享  回复(0）举报  6个月前
kq0g1dla

kq0g1dla2#

你能复现一个尽可能简单的示例吗？这样我就能看懂发生了什么。

赞(0）分享  回复(0）举报  6个月前
xqnpmsa8

xqnpmsa83#

/triage accepted

赞(0）分享  回复(0）举报  6个月前
gzszwxb4

gzszwxb44#

你能重现一个尽可能简单的示例吗？这样我可以看到发生了什么？
将它放入我的队列，希望几天内能处理完。

赞(0）分享  回复(0）举报  6个月前
ee7vknir

ee7vknir5#

编辑：我认为这是错误的...请稍等，我会进一步探索

好的，这是一个更小的复制品。首先 kubectl apply -k "https://github.com/kubernetes-sigs/gateway-api/config/crd?ref=v1.0.0"
然后设置3个文件
spec.yaml

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: hyper
  namespace: default
spec:
  gatewayClassName: test
  listeners:
  - name: "http"
    port: 80
    protocol: HTTP
status: {}

status.json

{
    "apiVersion": "gateway.networking.k8s.io/v1beta1",
    "kind": "Gateway",
    "metadata": {
        "name": "hyper",
        "namespace": "default"
    },
    "status": {}
}

现在运行

kubectl proxy &
for i in {0..1000}; do
  kubectl apply --server-side -f spec.yaml
  sleep 1
  curl localhost:8001/apis/gateway.networking.k8s.io/v1beta1/namespaces/default/gateways/hyper/status -X PUT -d @<(cat status.json| jq ".metadata.resourceVersion=\"$(kubectl get gtw hyper -ojsonpath='{.metadata.resourceVersion}')\"") -H "Content-type:  application/json"
  sleep 1
done

然后观察

$ kubectl get gtw -o "custom-columns=NAME:.metadata.name,RV:.metadata.resourceVersion" -w
2023-12-20T11:09:05.488274 NAME    RV
2023-12-20T11:09:05.488379 hyper   2672
2023-12-20T11:09:05.565892 hyper   2675
2023-12-20T11:09:06.660588 hyper   2678
2023-12-20T11:09:07.708598 hyper   2680
2023-12-20T11:09:08.802516 hyper   2683
2023-12-20T11:09:09.857935 hyper   2686
2023-12-20T11:09:10.951672 hyper   2688
2023-12-20T11:09:12.003941 hyper   2690
2023-12-20T11:09:13.097820 hyper   2692
2023-12-20T11:09:14.152415 hyper   2694
2023-12-20T11:09:15.246496 hyper   2697
2023-12-20T11:09:16.301352 hyper   2699
2023-12-20T11:09:17.390923 hyper   2702
2023-12-20T11:09:18.452580 hyper   2703
赞(0）分享  回复(0）举报  6个月前
vbopmzt1

vbopmzt16#

好的，我不确定我在上面说了什么，我甚至没有在我的复现器中使用服务器端应用。忽略我之前的评论 - 现在我认为我更好地理解了这个问题。
spec.yaml

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: hyper
  namespace: default
spec:
  gatewayClassName: test
  listeners:
  - name: "http"
    port: 80
    protocol: HTTP
status: {}

status.json

{
    "apiVersion": "gateway.networking.k8s.io/v1beta1",
    "kind": "Gateway",
    "metadata": {
        "name": "hyper",
        "namespace": "default"
    },
    "spec": {
        "gatewayClassName": ""
    },
    "status": {

    }
}

复现器：

kubectl proxy &
for i in {0..1000}; do
  kubectl apply --server-side -f spec.yaml
  sleep 1
  curl 'localhost:8001/apis/gateway.networking.k8s.io/v1beta1/namespaces/default/gateways/hyper/status?fieldManager=custom&fieldValidation=Strict&force=false' \
    -X PATCH -d @<(cat status.json| jq ".metadata.resourceVersion=\"$(kubectl get gtw hyper -ojsonpath='{.metadata.resourceVersion}')\"") -H "Content-type: application/apply-patch+yaml"
  sleep 1
done

使用 force=true 以获得原始行为("资源版本不断更新")。force=false 使问题更加明显，尽管如此：

{
  "kind": "Status",
  "apiVersion": "v1",
  "metadata": {},
  "status": "Failure",
  "message": "Apply failed with 1 conflict: conflict with \"kubectl\": .spec.gatewayClassName",
  "reason": "Conflict",
  "details": {
    "causes": [
      {
        "reason": "FieldManagerConflict",
        "message": "conflict with \"kubectl\"",
        "field": ".spec.gatewayClassName"
      }
    ]
  },
  "code": 409
}

所以即使我们正在写入 /status 子资源，我们最终还是弄乱了 spec 的东西。这似乎是可能的意外情况？
这种情况只发生在跨版本调用时。如果你将 curl 调用和 status.json 更改为 v1,一切都可以正常工作。

赞(0）分享  回复(0）举报  6个月前
我来回答

相关问题

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新问答

    更多
    • 蜀ICP备2022004421号-2 NULL123 https://www.null123.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com