• error execution phase preflight: couldn't validate the identity of the API Server.. x509: certificate has expired or is not yet valid:...


    错误:

    [preflight] Running pre-flight checks
    [WARNING IsDockerSystemdCheck]: detected "cgroupfs" as the Docker cgroup driver. The recommended driver is "systemd". Please follow the guide at https://kubernetes.io/docs/setup/cri/
    error execution phase preflight: couldn't validate the identity of the API Server: Get "https://10.10.102.155:6443/api/v1/namespaces/kube-public/configmaps/cluster-info?timeout=10s": x509: certificate has expired or is not yet valid: current time 2022-06-24T10:13:50+08:00 is before 2022-06-24T03:06:38Z
    To see the stack trace of this error execute with --v=5 or higher
    Error: exec command failed 10.10.102.197 [cat /etc/hosts |grep '10.10.102.155 sea.hub' || echo '10.10.102.155 sea.hub' >> /etc/hosts seautil certs --node-ip 10.10.102.197 --node-name node197 --service-cidr 10.96.0.0/22 --alt-names 127.0.0.1 --alt-names apiserver.cluster.local --alt-names 10.103.97.2 --alt-names 10.10.102.155 --alt-names 10.10.102.156 --alt-names 10.10.102.197 --alt-names 127.0.0.1 --alt-names apiserver.cluster.local --alt-names 10.103.97.2 --alt-names 172.16.0.181 --alt-names apiserver.cluster.local cat /etc/hosts |grep '10.10.102.155 apiserver.cluster.local' || echo '10.10.102.155 apiserver.cluster.local' >> /etc/hosts kubeadm join --config=/var/lib/sealer/data/my-cluster/rootfs/etc/kubeadm.yml -v 0 --ignore-preflight-errors=SystemVerification sed "s/10.10.102.155 apiserver.cluster.local/10.10.102.197 apiserver.cluster.local/g" < /etc/hosts > hosts && cp -f hosts /etc/hosts rm -rf .kube/config && mkdir -p /root/.kube && cp /etc/kubernetes/admin.conf /root/.kube/config] failed to execute command(kubeadm join --config=/var/lib/sealer/data/my-cluster/rootfs/etc/kubeadm.yml -v 0 --ignore-preflight-errors=SystemVerification) on host(10.10.102.197): error(Process exited with status 1)

    出现该问题可能有多种原因:

    1. token 过期

    此时需要通过 kubedam 重新生成 token

    kubeadm token create --print-join-command
    

    2. k8s apiserver 不可达

    setenforce 0
    sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
    systemctl disable firewalld --now
    

    3. 这几台虚拟机的时间不同步

    查看时间,分别在这几台虚拟机中执行:

    date
    

    查看时间是否相同,如果不同,则要进行同步。
    时间同步:分别在这几台虚拟机中执行:

    yum -y install ntp
    ntpdate -u cn.pool.ntp.org
    

    出了其他问题可以重启看看

  • 相关阅读:
    hdu 1875 Krustal最小生成树
    寒假学习PID和latex随笔2013/2/10
    HDU:今年暑假不AC
    HDU:七夕节
    寒假规划
    HDU:开门人和关门人
    HDU:cake
    HDU:最小公倍数
    HDU:Who's in the Middle
    Latex 第一个程序 效果
  • 原文地址:https://www.cnblogs.com/FengZeng666/p/16406341.html
Copyright © 2020-2023  润新知