openpai/openpai-runtime: barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized

[poetryben88]

root@pai-worker1:/etc/kubernetes# docker logs b441c50e30fa

• CHILD_PROCESS=UNKNOWN
• trap exit_handler EXIT
• PAI_WORK_DIR=/usr/local/pai
• PAI_CONFIG_DIR=/usr/local/pai-config
• PAI_INIT_DIR=/usr/local/pai/init.d
• PAI_RUNTIME_DIR=/usr/local/pai/runtime.d
• PAI_LOG_DIR=/usr/local/pai/logs/22000be4-a8f3-4e19-965c-61521c5402df
• PAI_SECRET_DIR=/usr/local/pai/secrets
• PAI_USER_EXTENSION_SECRET_DIR=/usr/local/pai/user-extension-secrets
• PAI_TOKEN_SECRET_DIR=/usr/local/pai/token-secrets
• chmod a+rw /usr/local/pai/logs/22000be4-a8f3-4e19-965c-61521c5402df
• find /usr/local/pai/logs/22000be4-a8f3-4e19-965c-61521c5402df -maxdepth 1 -type f '!' -name init.log
• LOG_FILES=
• '[[' '!' -z ]]
• find /usr/local/pai -maxdepth 1 -mindepth 1 '!' -name logs -exec rm -rf '{}' ';'
  rm: can't remove '/usr/local/pai/user-extension-secrets/..data': Read-only file system
  rm: can't remove '/usr/local/pai/user-extension-secrets/userExtensionSecrets.yaml': Read-only file system
  rm: can't remove '/usr/local/pai/user-extension-secrets/..2021_11_19_03_28_31.917251457/userExtensionSecrets.yaml': Read-only file system
• mv ./init.py ./common ./init ./init.d ./package_cache ./plugins ./requirements.txt ./runtime ./runtime.d /usr/local/pai
• cd /usr/local/pai
• '[[' true '=' true ]]
• CHILD_PROCESS=FRAMEWORK_BARRIER
• echo 'frameworkbarrier start'
  frameworkbarrier start
• '[[' -f /var/run/secrets/kubernetes.io/serviceaccount/token ]]
• unset KUBE_APISERVER_ADDRESS
• /usr/local/pai/init.d/frameworkbarrier
• tee /usr/local/pai/logs/22000be4-a8f3-4e19-965c-61521c5402df/barrier.log
  I1119 03:28:37.319208 14 barrier.go:211] Initializing frameworkbarrier
  I1119 03:28:37.319449 14 barrier.go:214] With Config:
  kubeApiServerAddress: ""
  kubeConfigFilePath: ""
  frameworkNamespace: default
  frameworkName: a98ec660fe68eb3b5fa6afc70c42b464
  barrierCheckIntervalSec: 10
  barrierCheckTimeoutSec: 600
  W1119 03:28:37.319492 14 client_config.go:549] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work.
  I1119 03:28:37.321382 14 barrier.go:227] Running frameworkbarrier
  W1119 03:28:37.332512 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:28:47.334425 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:28:57.334495 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:29:07.334570 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:29:17.334535 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:29:27.334474 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:29:37.334299 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:29:47.334596 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:29:57.334489 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:30:07.334696 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized
  W1119 03:30:17.334543 14 barrier.go:253] Failed to get Framework object from ApiServer: Unauthorized

I don't know what should I configure any more?

[Binyang2014]

Did you deploy service account for pai-runtime?