建立 IPsec 隧道时，Pod 无法挂载 PVC
适用于
- ONTAP 9.X
- AFF
- Kubernetes
- NFS
问题描述
- 在启用 IPsec 时使用持久卷声明 (PVC) 在 Kubernetes 中创建 pod 时，pod 无法装载 PVC。
- 在 Worker 节点中观察到以下错误：
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning FailedScheduling 30m (x3 over 30m) default-scheduler 0/4 nodes are available: pod has unbound immediate PersistentVolumeClaims. preemption: 0/4 nodes are available: 4 Preemption is not helpful for scheduling.
Normal Scheduled 30m default-scheduler Successfully assigned (Kubernetes Cluster) to (Pool Name)
Normal SuccessfulAttachVolume 30m attachdetach-controller AttachVolume.Attach succeeded for volume "(Volume Name)"
Warning FailedMount 15m (x3 over 27m) kubelet MountVolume.SetUp failed for volume "(Volume Name)" : rpc error: code = Aborted desc = request waited too long for the lock
Warning FailedMount 9s (x9 over 28m) kubelet MountVolume.SetUp failed for volume "(Volume Name)" : rpc error: code = DeadlineExceeded desc = context deadline exceeded