Question

我正在尝试第一次设置Kubernetes。我正在关注Fedora手册安装指南： http://kubernetes.io/v1.0/docs/getting-started-guides/fedora/fedora_manual_config.html

我检查了我的API服务器的日志，并收到此错误：

Dim rng as Range
Dim rngInspection as Range

Set rng = Range("B2:EX") -- Range of the left table
Set rngInspection = Range("O2:P5") -- Range of the right table

For Each rowInspection In rngInspection.Rows

   Dim part as string, serial as string, inspectionDate as String
   part = rowInspection.Cells(1).Value
   serial = rowInspection.Cells(2).Value
   inspectionDate = rowInspection.Cells(3)

   For Each row in rng.rows
       If (row.Cells(1).Value = part And row.Cells(2).Value = serial) Then
            row.Cells(4).Value = inspectionDate
       EndIf
   Next row

Next rowInspection

我认为它需要某种证书，但安装指南并未提及任何相关信息。这是我的apiserver配置文件的样子

 server.go:464] Unable to listen for secure (open /var/run/kubernetes/apiserver.crt: no such file or directory); will try again.

这是我的服务状态

# The address on the local server to listen to.
KUBE_API_ADDRESS="--address=0.0.0.0"

# The port on the local server to listen on.
KUBE_API_PORT="--port=8080"

# Port node listen on
KUBELET_PORT="--kubelet_port=10250"

# Location of the etcd cluster
#KUBE_ETCD_SERVERS="--etcd_servers=http://vagrant-master:4001"
KUBE_ETCD_SERVERS="--etcd_servers=http://127.0.0.1:4001"

# Address range to use for services
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"

# default admission control policies
KUBE_ADMISSION_CONTROL="--admission_control=NamespaceAutoProvision,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"

# Add your own!
KUBE_API_ARGS="--service_account_key_file=/etc/kubernetes/certs/serviceaccount.key"

如何解决此错误？

Answer 1

默认情况下，kube-apiserver进程尝试使用目录/var/run/kubernetes中的凭据在端口6443上打开安全（https）服务器端口。如果要禁用安全端口，可以传递--secure-port=0，这会使您的错误消失。或者，您可以为您的群集manually create certificates，以便该过程能够成功打开安全端口。

Answer 2

这是kube-apiserver中的一个错误。 https://bugzilla.redhat.com/show_bug.cgi?id=1201965

Kubernetes API服务器：无法监听安全性

2 个答案: