報錯1:
安裝k8s的node節點上的kubelet,啟動報錯:
kubelet: error: failed to run Kubelet: cannot create certificate signing request: Unauthorized
查看apiserver日志報錯:
k8s_master kube-apiserver: E0202 14:25:20.749540 40045 authentication.go:64] Unable to authenticate the request due to an error: [invalid bearer token, [invalid bearer token, invalid bearer token]]
原因是:kuber-apiserver啟動參數中的token.csv和kubelet啟動參數中指定的bootstrap文件bootstrap.kubeconfig中的token值是否一致,此外該token必須為實際數值,不能使用變量代替
修改 bootstrap.kubeconfig中的token 等於 kuber-apiserver啟動參數中的token.csv即可。
參考:https://www.bbsmax.com/A/n2d9bMnwzD/
報錯2: no server found for cluster "kubernetes"
因為在master上面建立的 kube-proxy.kubeconfig 不對,忘記了 :export KUBE_APISERVER="https://192.168.118.211:6443";
重新建立 kube-proxy.kubeconfig 即可。
報錯3:
cannot create certificate signing request: certificatesigningrequests.certificates.k8s.io is forbidden: User "kubelet-bootstrap" cannot create certificatesigningrequests
是由於在master上忘記創建clusterrolebinding ,執行:
../bin/kubectl create clusterrolebinding kubelet-bootstrap --clusterrole=system:node-bootstrapper --user=kubelet-bootstrap
