- Rancher 版本:2.8.3
- 安装选项 (Docker install/Helm Chart):
- 在线或离线部署:docker单机安装
下游集群信息
- Kubernetes 版本:
- 华为云cce 1.28.3
用户信息
- 登录用户的角色是什么? (管理员/集群所有者/集群成员/项目所有者/项目成员/自定义):自定义角色
- 如果自定义,自定义权限集:
自定义权限模板yaml文件如下:
administrative: false
apiVersion: management.cattle.io/v3
builtin: false
clusterCreatorDefault: false
context: project
displayName: test-template-ns
external: false
hidden: false
kind: RoleTemplate
locked: false
metadata:
annotations:
cleanup.cattle.io/rtUpgradeCluster: ‘true’
field.cattle.io/creatorId: user-cmjkq
lifecycle.cattle.io/create.mgmt-auth-roletemplate-lifecycle: ‘true’
creationTimestamp: ‘2024-04-18T02:35:55Z’
finalizers:- controller.cattle.io/mgmt-auth-roletemplate-lifecycle
generateName: rt-
generation: 3
labels:
cattle.io/creator: norman
managedFields: - apiVersion: management.cattle.io/v3
fieldsType: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
f:lifecycle.cattle.io/create.mgmt-auth-roletemplate-lifecycle: {}
f:finalizers:
.: {}
v:“controller.cattle.io/mgmt-auth-roletemplate-lifecycle”: {}
manager: rancher
operation: Update
time: ‘2024-04-18T02:35:56Z’ - apiVersion: management.cattle.io/v3
fieldsType: FieldsV1
fieldsV1:
f:administrative: {}
f:builtin: {}
f:clusterCreatorDefault: {}
f:context: {}
f:displayName: {}
f:external: {}
f:hidden: {}
f:locked: {}
f:metadata:
f:annotations:
.: {}
f:cleanup.cattle.io/rtUpgradeCluster: {}
f:field.cattle.io/creatorId: {}
f:generateName: {}
f:labels:
.: {}
f:cattle.io/creator: {}
f:projectCreatorDefault: {}
f:roleTemplateNames: {}
f:rules: {}
manager: Go-http-client
operation: Update
time: ‘2024-04-18T02:52:23Z’
name: rt-hjqbt
resourceVersion: ‘391572’
uid: 6081b4fd-c0f5-4239-a6b4-41143500c072
projectCreatorDefault: false
roleTemplateNames:
rules:
- controller.cattle.io/mgmt-auth-roletemplate-lifecycle
- apiGroups:
- apps
resources: - deployments
verbs: - get
- list
- watch
- apps
- apiGroups:
- ‘’
resources: - pods
verbs: - get
- list
- watch
- delete
- ‘’
- apiGroups:
- ‘’
resourceNames:
resources: - pods/log
verbs: - create
- get
- ‘’
- apiGroups:
- ‘’
resourceNames:
resources: - pods/exec
verbs: - create
- get
- ‘’
- 如果自定义,自定义权限集:
主机操作系统:
centos7
问题描述:
使用rancher界面的自定义角色权限进入到pod的exec终端操作后,点击X退出终端,bash进程会留存,大量exec执行后,会大量留存bash挂起进程
重现步骤:
1、进入rancher界面
2、点击pod后边的execute shell
3、操作后点击X关闭shell console控制台
4、再次进入pod的exec控制台使用ps -ef命令会发现上次的exec进入的bash进程还存在
5、反复重复以上步骤,会一直增加bash进程数量
截图:
其他上下文信息: