kubectl describe

Name:           istio-ingressgateway-5855454469-xj4xs
Namespace:      istio-system
Priority:       0
Node:           minikube/192.168.39.240
Start Time:     Mon, 22 Jun 2020 23:47:03 +0800
Labels:         app=istio-ingressgateway
                chart=gateways
                heritage=Tiller
                istio=ingressgateway
                pod-template-hash=5855454469
                release=istio
                service.istio.io/canonical-name=istio-ingressgateway
                service.istio.io/canonical-revision=latest
Annotations:    sidecar.istio.io/inject: false
Status:         Pending
IP:             
IPs:            <none>
Controlled By:  ReplicaSet/istio-ingressgateway-5855454469
Containers:
  istio-proxy:
    Container ID:  
    Image:         docker.io/istio/proxyv2:1.6.3
    Image ID:      
    Ports:         15021/TCP, 8080/TCP, 8443/TCP, 15443/TCP, 15011/TCP, 15012/TCP, 8060/TCP, 853/TCP, 15090/TCP
    Host Ports:    0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP, 0/TCP
    Args:
      proxy
      router
      --domain
      $(POD_NAMESPACE).svc.cluster.local
      --proxyLogLevel=warning
      --proxyComponentLogLevel=misc:error
      --log_output_level=default:info
      --serviceCluster
      istio-ingressgateway
      --trust-domain=cluster.local
    State:          Waiting
      Reason:       ContainerCreating
    Ready:          False
    Restart Count:  0
    Limits:
      cpu:     2
      memory:  1Gi
    Requests:
      cpu:      100m
      memory:   128Mi
    Readiness:  http-get http://:15021/healthz/ready delay=1s timeout=1s period=2s #success=1 #failure=30
    Environment:
      JWT_POLICY:                third-party-jwt
      PILOT_CERT_PROVIDER:       istiod
      CA_ADDR:                   istiod.istio-system.svc:15012
      NODE_NAME:                  (v1:spec.nodeName)
      POD_NAME:                  istio-ingressgateway-5855454469-xj4xs (v1:metadata.name)
      POD_NAMESPACE:             istio-system (v1:metadata.namespace)
      INSTANCE_IP:                (v1:status.podIP)
      HOST_IP:                    (v1:status.hostIP)
      SERVICE_ACCOUNT:            (v1:spec.serviceAccountName)
      CANONICAL_SERVICE:          (v1:metadata.labels['service.istio.io/canonical-name'])
      CANONICAL_REVISION:         (v1:metadata.labels['service.istio.io/canonical-revision'])
      ISTIO_META_WORKLOAD_NAME:  istio-ingressgateway
      ISTIO_META_OWNER:          kubernetes://apis/apps/v1/namespaces/istio-system/deployments/istio-ingressgateway
      ISTIO_META_MESH_ID:        cluster.local
      ISTIO_META_ROUTER_MODE:    sni-dnat
      ISTIO_META_CLUSTER_ID:     Kubernetes
    Mounts:
      /etc/istio/config from config-volume (rw)
      /etc/istio/ingressgateway-ca-certs from ingressgateway-ca-certs (ro)
      /etc/istio/ingressgateway-certs from ingressgateway-certs (ro)
      /etc/istio/pod from podinfo (rw)
      /etc/istio/proxy from istio-envoy (rw)
      /var/run/ingress_gateway from ingressgatewaysdsudspath (rw)
      /var/run/secrets/istio from istiod-ca-cert (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from istio-ingressgateway-service-account-token-pm6hf (ro)
      /var/run/secrets/tokens from istio-token (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  istiod-ca-cert:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      istio-ca-root-cert
    Optional:  false
  podinfo:
    Type:  DownwardAPI (a volume populated by information about the pod)
    Items:
      metadata.labels -> labels
      metadata.annotations -> annotations
  istio-envoy:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     
    SizeLimit:  <unset>
  ingressgatewaysdsudspath:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     
    SizeLimit:  <unset>
  istio-token:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  43200
  config-volume:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      istio
    Optional:  true
  ingressgateway-certs:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  istio-ingressgateway-certs
    Optional:    true
  ingressgateway-ca-certs:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  istio-ingressgateway-ca-certs
    Optional:    true
  istio-ingressgateway-service-account-token-pm6hf:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  istio-ingressgateway-service-account-token-pm6hf
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  <none>
Tolerations:     node.kubernetes.io/not-ready:NoExecute for 300s
                 node.kubernetes.io/unreachable:NoExecute for 300s
Events:
  Type     Reason       Age                  From               Message
  ----     ------       ----                 ----               -------
  Normal   Scheduled    2m25s                default-scheduler  Successfully assigned istio-system/istio-ingressgateway-5855454469-xj4xs to minikube
  Warning  FailedMount  22s                  kubelet, minikube  Unable to attach or mount volumes: unmounted volumes=[istiod-ca-cert istio-token], unattached volumes=[podinfo istiod-ca-cert ingressgateway-certs ingressgateway-ca-certs istio-ingressgateway-service-account-token-pm6hf config-volume istio-token ingressgatewaysdsudspath istio-envoy]: timed out waiting for the condition
  Warning  FailedMount  17s (x9 over 2m25s)  kubelet, minikube  MountVolume.SetUp failed for volume "istiod-ca-cert" : configmap "istio-ca-root-cert" not found
  Warning  FailedMount  17s (x9 over 2m25s)  kubelet, minikube  MountVolume.SetUp failed for volume "istio-token" : failed to fetch token: the server could not find the requested resource