1.3. 已知问题

运行以下命令，以确认因为重新安装了 CRD 而导致 klusterletaddonconfig CRD 被删除：

% oc get klusterletaddonconfig --all-namespaces

如果返回的内容为 No resources found，则问题就可能是因为重新安装造成的。继续第 3 步。

将以下脚本保存到文件中。在这个示例中，文件名是 restore-addons.sh：

KUBECTL=oc
ACM_NAMESPACE=open-cluster-management

ACM_VERSION=$(${KUBECTL} get -n ${ACM_NAMESPACE} `${KUBECTL} get mch -oname -n ${ACM_NAMESPACE} | head -n1` -ojsonpath='{.status.desiredVersion}')
if [ "${ACM_VERSION}" = ""  ]; then
ACM_VERSION=2.1.1
fi

echo "ACM version: ${ACM_VERSION}"

for clusterName in `${KUBECTL} get managedcluster --ignore-not-found | grep -v "NAME" | awk '{ print $1 }'`; do
    echo "Checking klusterletaddonconfig in ${clusterName} namespace."
    ${KUBECTL} get klusterletaddonconfig ${clusterName} -n ${clusterName} >/dev/null 2>&1
    if [ "$?" != "0"  ]; then
        echo "  klusterletaddonconfig in ${clusterName} is missing."
        echo "  Creating..."
        printf "  "
        cat <<EOF | ${KUBECTL}  apply -f -
apiVersion: agent.open-cluster-management.io/v1
kind: KlusterletAddonConfig
metadata:
  name: ${clusterName}
  namespace: ${clusterName}
spec:
  clusterLabels:
    cloud: auto-detect
    vendor: auto-detect
  clusterName: ${clusterName}
  clusterNamespace: ${clusterName}
  applicationManager:
    enabled: true
  certPolicyController:
    enabled: true
  iamPolicyController:
    enabled: true
  policyController:
    enabled: true
  searchCollector:
    enabled: true
  version: ${ACM_VERSION}
EOF

    fi
    echo "  Done."
done

如果您没有在 open-cluster-management 命名空间中安装 Red Hat Advanced Cluster Management，请将 ACM_NAMESPACE 的值替换为您的命名空间名称。

通过 CLI 运行脚本。您的命令应类似以下命令：

chmod +x restore-addons.sh && ./restore-addons.sh

运行该脚本会在每个受管集群命名空间中重新创建缺少的 klusterletaddonconfig CRD。

输入以下命令查找由 Red Hat Advanced Cluster Management 2.1 CSV 部署的所有 clusterrolebinding 资源：

oc get clusterrolebinding |grep advanced-cluster-management

您的输出应类似以下内容：

advanced-cluster-management.v2.1.0-86dfdf7c5d          ClusterRole/advanced-cluster-management.v2.1.0-86dfdf7c5d       9h
advanced-cluster-management.v2.1.0-cd8d57f64           ClusterRole/advanced-cluster-management.v2.1.0-cd8d57f64        9h

打开每个 clusterrolebinding，找到与 open-cluster-management 服务帐户关联的 clusterRole 名称。输入类似以下的命令：

oc get clusterrolebinding advanced-cluster-management.v2.1.0-cd8d57f64 -o yaml

您的输出应类似以下内容：

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: advanced-cluster-management.v2.1.0-cd8d57f64
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: advanced-cluster-management.v2.1.0-cd8d57f64
subjects:
- kind: ServiceAccount
  name: multicluster-operators
  namespace: open-cluster-management

通过在 .yaml 文件中添加类似以下内容的内容来手动创建任何缺少的 clusterRole 条目：

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: advanced-cluster-management.v2.1.0-cd8d57f64
rules:
- apiGroups:
  - '*'
  resources:
  - '*'
  verbs:
  - '*'