启用ISTIO-CNI后自动注入的POD会启动istio-validation容器用来检测网络是否正常,在为我们公司另外一条业务线的测试环境Setup时发现istio-validation容器无法启动,日志输出: Error connecting to 127.0.0.6:15002: dial tcp 127.0.0.1:0->127.0.0.6:15002: connect: connection refused 各种排查,最后查看系统日志journalctl -ex Nov 02 14:50:30 k8s-worker-03 kubelet[1029]: W1102 14:50:30.291177 1029 cni.go:202] Error validating CNI config list { Nov 02 14:50:30 k8s-worker-03 kubelet[1029]: "name": "cbr0", Nov 02 14:50:30 k8s-worker-03 kubelet[1029]: "cniVersion": "0.3.1", Nov 02 14:50:30 k8s-worker-03 kubelet[1029]: "plugins": [ Nov 02 14:50:30 k8s-worker-03 kubelet[1029]: { Nov 02