kubernetes常见问题

- 日理万妓 2022-06-01 04:10 254阅读 0赞

1 No cloud provider specified

在node2结点，systemctl start kubelet 启动后，查看日志：

Jan 19 15:14:15 node2 kubelet[23206]: I0119 15:14:15.707713   23206 plugins.go:101] No cloud provider specified.
    Jan 19 15:14:15 node2 kubelet[23206]: I0119 15:14:15.707733   23206 server.go:303] No cloud provider specified: "" from the config file: ""
    Jan 19 15:14:15 node2 kubelet[23206]: I0119 15:14:15.707750   23206 bootstrap.go:58] Using bootstrap kubeconfig to generate TLS client cert, key and kubeconfig file

通过  kubelet  的  TLS  证书请求  
  
kubelet  首次启动时向  kube-apiserver  发送证书签名请求，必须通过后  kubernetes 系统才会将该  Node  加入到集群。

查看未授权的 CSR 请求：

root@master:~# kubectl get csr
    NAME                                                   AGE       REQUESTOR           CONDITION
    node-csr-YhFNdOVWqG9q5dBULRoQEyjGHBd4yu9MZ9DYc2T0W08   27s       kubelet-bootstrap   Pending

通过 CSR 请求：

root@master:~# kubectl certificate approve node-csr-YhFNdOVWqG9q5dBULRoQEyjGHBd4yu9MZ9DYc2T0W08
    certificatesigningrequest "node-csr-YhFNdOVWqG9q5dBULRoQEyjGHBd4yu9MZ9DYc2T0W08" approved
    root@master:~# kubectl get csr
    NAME                                                   AGE       REQUESTOR           CONDITION
    node-csr-YhFNdOVWqG9q5dBULRoQEyjGHBd4yu9MZ9DYc2T0W08   48s       kubelet-bootstrap   Approved,Issued

之后会在/etc/kubernetes/目录生成kubelet.kubeconfig  文件和公私钥：

$ ls -l /etc/kubernetes/kubelet.kubeconfig
    -rw------- 1 root root 2284 Apr 7 02:07 /etc/kubernetes/kubelet
    .kubeconfig
    $ ls -l /etc/kubernetes/ssl/kubelet*
    -rw-r--r-- 1 root root 1046 Apr 7 02:07 /etc/kubernetes/ssl/kub
    elet-client.crt
    -rw------- 1 root root 227 Apr 7 02:04 /etc/kubernetes/ssl/kub
    elet-client.key
    -rw-r--r-- 1 root root 1103 Apr 7 02:07 /etc/kubernetes/ssl/kub
    elet.crt
    -rw------- 1 root root 1675 Apr 7 02:07 /etc/kubernetes/ssl/kub
    elet.key