惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
博客园 - Franky
GbyAI
GbyAI
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
爱范儿
爱范儿
IT之家
IT之家
酷 壳 – CoolShell
酷 壳 – CoolShell
aimingoo的专栏
aimingoo的专栏
博客园_首页
MongoDB | Blog
MongoDB | Blog
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
Recent Announcements
Recent Announcements
Scott Helme
Scott Helme
有赞技术团队
有赞技术团队
M
MIT News - Artificial intelligence
C
CERT Recently Published Vulnerability Notes
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
Jina AI
Jina AI
F
Fortinet All Blogs
N
Netflix TechBlog - Medium
L
LangChain Blog
L
LINUX DO - 最新话题
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
H
Hacker News: Front Page
MyScale Blog
MyScale Blog
P
Palo Alto Networks Blog
G
Google Developers Blog
Google DeepMind News
Google DeepMind News
AI
AI
T
Troy Hunt's Blog
Microsoft Azure Blog
Microsoft Azure Blog
阮一峰的网络日志
阮一峰的网络日志
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Vercel News
Vercel News
Microsoft Security Blog
Microsoft Security Blog
罗磊的独立博客
S
Secure Thoughts
大猫的无限游戏
大猫的无限游戏
博客园 - 叶小钗
人人都是产品经理
人人都是产品经理
Blog — PlanetScale
Blog — PlanetScale
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
博客园 - 三生石上(FineUI控件)
S
Security @ Cisco Blogs
Cloudbric
Cloudbric
E
Exploit-DB.com RSS Feed
Attack and Defense Labs
Attack and Defense Labs

博客园 - 寒枫

network plugin is not ready: cni config uninitialized Abp VNext 5.1.3 快速實現數據庫初始化 Centos 卸载 MySQL 已激活的 SQL Prompt 提示授权过期 .NET Core 3.0 部署在docker上运行 Docker 微服务教程 Docker 入门教程 快速了解 Linux系统信息 Navicat 连接本地MS-SQL服务器,只能用localhost无法使用127.0.0.1 安装Ubuntu Server 18.04 并支持远程方式 AdventureWorks 安装和配置[转自 微软msdn] SQL Server 2014 Agent 无法启动 安装 Visual Stuidio 2010 失败 发送邮件的例子 解决VS2013调试ASP.NET中无法调试的问题:当前不会命中断点。在 XXXX.dll 中找到了 XXX.cs 的副本,但是当前源代码与 XXXX.dll 中内置的版本不同。 编译器错误消息: CS0016: 未能写入输出文件 如何使用SQL Server链接服务器访问DB2 Server 另类方法解决设计Web页面出现:Error Creating Control [转载]hao123军事频道首页JQ焦点图
Unable to connect to the server: x509: certificate signed by unknown authority
寒枫 · 2022-04-08 · via 博客园 - 寒枫

错误描述:

[root@k8s-master ~]# kubectl get nodes
Unable to connect to the server: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")

一般是:k8s master 初始化操作不完整导致,完整过程如下:

[root@k8s-master ~]# kubeadm reset
[root@k8s-master ~]# kubeadm init --apiserver-advertise-address=192.168.58.138 --kubernetes-version v1.23.5 --pod-network-cidr=192.168.0.0/16

看到如下提示信息后要继续执行:

Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as root:

kubeadm join 192.168.58.138:6443 --token ngpadd.js4es78t13mi9cjd \
--discovery-token-ca-cert-hash sha256:a72b70060492ad11c2034db603c6d58b069d18a7aa44cd8903ccb383ffdb342a

如果当前是 root 用户,执行如下:

[root@k8s-master ~]# export KUBECONFIG=/etc/kubernetes/admin.conf

如果当时是非root用户,执行如下:

[root@k8s-master ~]#mkdir -p $HOME/.kube
[root@k8s-master ~]#sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
[root@k8s-master ~]#sudo chown $(id -u):$(id -g) $HOME/.kube/config

再次执行:

[root@k8s-master ~]# kubectl get nodes
NAME STATUS ROLES AGE VERSION
k8s-master Ready control-plane,master 106m v1.23.5
k8s-node1 Ready <none> 97m v1.23.5

 问题解决,希望能帮到您!