我未能部署 istio 并遇到此问题。当我尝试使用istioctl install --set profile=default -y部署 istio 时。输出就像:

➜  istio-1.11.4 istioctl install --set profile=default -y
✔ Istio core installed                                                                                                                                                                        
✔ Istiod installed                                                                                                                                                                            
✘ Ingress gateways encountered an error: failed to wait for resource: resources not ready after 5m0s: timed out waiting for the condition                                                     
  Deployment/istio-system/istio-ingressgateway (containers with unready status: [istio-proxy])
- Pruning removed resources                                                                                                                                                                   Error: failed to install manifests: errors occurred during operation

运行kubectl get pods -n=istio-system后，我发现 istio-ingressgateway 的 pod 被创建，并且描述的结果：

Events:
  Type     Reason     Age                     From               Message
  ----     ------     ----                    ----               -------
  Normal   Scheduled  4m36s                   default-scheduler  Successfully assigned istio-system/istio-ingressgateway-8dbb57f65-vc85p to k8s-slave
  Normal   Pulled     4m35s                   kubelet            Container image "docker.io/istio/proxyv2:1.11.4" already present on machine
  Normal   Created    4m35s                   kubelet            Created container istio-proxy
  Normal   Started    4m35s                   kubelet            Started container istio-proxy
  Warning  Unhealthy  3m56s (x22 over 4m34s)  kubelet            Readiness probe failed: Get "http://10.244.1.4:15021/healthz/ready": dial tcp 10.244.1.4:15021: connect: connection refused

我不能得到这个 pod 的日志：

➜  ~ kubectl logs pods/istio-ingressgateway-8dbb57f65-vc85p -n=istio-system
Error from server: Get "https://192.168.0.154:10250/containerLogs/istio-system/istio-ingressgateway-8dbb57f65-vc85p/istio-proxy": dial tcp 192.168.0.154:10250: i/o timeout

我在华为云中的两个 VM 上运行所有这些命令，在 ubuntu18.04 中有一个 2C8G master 和一个 2C4G slave。我已经重新安装了环境和 kubernetes 集群，但这没有帮助。

没有 ingressgateway

我也尝试了只运行 istiod 的istioctl install --set profile=minimal -y。但是当我尝试在自动注入打开的情况下运行 httpbin (kubectl apply -f samples/httpbin/httpbin.yaml) 时,部署无法创建 pod。

➜  istio-1.11.4 kubectl get deployment
NAME      READY   UP-TO-DATE   AILABLE   AGE
httpbin   0/1     0            0           5m24s
➜  istio-1.11.4 kubectl describe deployment/httpbin 
...
Events:
  Type    Reason             Age   From                   Message
  ----    ------             ----  ----                   -------
  Normal  ScalingReplicaSet  6m6s  deployment-controller  Scaled up replica set httpbin-74fb669cc6 to 1

当我取消标签的默认命名空间（kubectl label namespace default istio-injection-），一切工作正常。

我希望部署 istio ingressgateway 并像istio-ingressgateway一样运行 demo，但是我不知道如何解决这种情况。感谢您的任何帮助。