rancher問題積累

1、卸載rancher出現問題

報錯信息：error: unable to retrieve the complete list of server APIs: custom.metrics.k8s.io/v1beta1: the server is currently unable to handle the request

排查問題

[root@localhost ~]$ kubectl get apiservice
NAME                                   SERVICE                                                          AVAILABLE                 AGE
v1beta1.custom.metrics.k8s.io          cattle-monitoring-system/rancher-monitoring-prometheus-adapter   False (ServiceNotFound)   24h

解決辦法

[root@localhost ~]$ kubectl delete apiservice v1beta1.custom.metrics.k8s.io --force
warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
apiservice.apiregistration.k8s.io "v1beta1.custom.metrics.k8s.io" force deleted

參考： https://blog.csdn.net/weixin_40449300/article/details/108348420

2、serviceaccount 無法創建secrct

報錯信息：E0308 02:52:42.957365       1 tokens_controller.go:261] error synchronizing serviceaccount default/nginx-ingress-backend: Internal error occurred: failed calling webhook "rancher.cattle.io": Post "https://rancher-webhook.cattle-system.svc:443/v1/webhook/mutation?timeout=10s": service "rancher-webhook" not found

排查問題

通過排查，發現是有准入控制器，https://kubernetes.io/zh/docs/reference/access-authn-authz/extensible-admission-controllers/#admission-webhooks

[root@localhost  ~]$ kubectl get mutatingwebhookconfigurations
NAME                             WEBHOOKS   AGE
mutating-webhook-configuration   7          28h
rancher-monitoring-admission     1          27h
rancher.cattle.io                2          28h
[root@localhost  ~]$ kubectl get validatingwebhookconfigurations
NAME                               WEBHOOKS   AGE
rancher-monitoring-admission       1          27h
rancher.cattle.io                  2          28h
validating-webhook-configuration   7          28h

解決辦法

刪除准入控制器

[root@localhost ~]$ kubectl delete mutatingwebhookconfigurations mutating-webhook-configuration
mutatingwebhookconfiguration.admissionregistration.k8s.io "mutating-webhook-configuration" deleted
[root@localhost ~]$ kubectl delete mutatingwebhookconfigurations rancher-monitoring-admission
mutatingwebhookconfiguration.admissionregistration.k8s.io "rancher-monitoring-admission" deleted
[root@localhost ~]$ kubectl delete mutatingwebhookconfigurations rancher.cattle.io
mutatingwebhookconfiguration.admissionregistration.k8s.io "rancher.cattle.io" deleted
[root@localhost ~]$ kubectl delete validatingwebhookconfigurations validating-webhook-configuration
validatingwebhookconfiguration.admissionregistration.k8s.io "validating-webhook-configuration" deleted
[root@localhost ~]$ kubectl delete validatingwebhookconfigurations rancher-monitoring-admission
validatingwebhookconfiguration.admissionregistration.k8s.io "rancher-monitoring-admission" deleted
[root@localhost ~]$ kubectl delete validatingwebhookconfigurations rancher.cattle.io
validatingwebhookconfiguration.admissionregistration.k8s.io "rancher.cattle.io" deleted