尝试允许节点加入Kubernetes群集时未经授权

时间:2018-05-07 07:57:23

标签: kubernetes kubelet

我有一个双节点集群,其中一个是主节点,另一个是从节点。它从过去的26天开始运行。今天我尝试使用kubeadm reset删除节点并再次添加它并且kubelet无法启动

cni.go:171] Unable to update cni config: No networks found in /etc/cni/net.d
The binary conntrack is not installed, this can cause failures in network connection cleanup.
server.go:376] Version: v1.10.2
feature_gate.go:226] feature gates: &{{} map[]}
plugins.go:89] No cloud provider specified.
server.go:233] failed to run Kubelet: cannot create certificate signing request: Unauthorized

当join命令成功时

[preflight] Running pre-flight checks.
[WARNING FileExisting-crictl]: crictl not found in system path
Suggestion: go get github.com/kubernetes-incubator/cri-tools/cmd/crictl
[preflight] Starting the kubelet service
[discovery] Trying to connect to API Server "aaaaa:6443"
[discovery] Created cluster-info discovery client, requesting info from "https://aaaaa:6443"
[discovery] Requesting info from "https:/aaaaaa:6443" again to validate TLS against the pinned public key
[discovery] Cluster info signature and contents are valid and TLS certificate validates against pinned roots, will use API Server
[discovery] Successfully established connection with API Server "aaaa:6443"

This node has joined the cluster:

Certificate signing request was sent to master and a response
was received.
The Kubelet was informed of the new secure connection details.

Run 'kubectl get nodes' on the master to see this node join the cluster.

IMO日志无法运行Kubelet:无法创建证书签名请求:未授权是问题的根源,但我不知道它是如何发生以及如何解决它。

TIA。我可以提供更多细节,但我不确定我将给予什么

0 个答案:

没有答案