☰

kubernetes 中的多主设置，weave net 运行不正常

tag-icon • tag-icon docker kubernetes
kubernetes 中的多主设置，weave net 运行不正常

我们尝试在 kubernete 中设置多主机，我们的网络插件不正确，它显示以下错误 在此输入图像描述

我跟着这篇博文用于在 kubernetes 中设置多主机，

集群信息：

Kubernetes version: v14.3.0
Cloud being used: (put bare-metal if not on a public cloud) 
Installation method:
Host OS: 18.04.2

设置编织网后，我们收到以下错误。

{"log":"ERROR: logging before flag.Parse: E0701 07:51:53.278548   25716 reflector.go:205] github.com/weaveworks/weave/prog/weave-npc/main.go:321: Failed to list *v1.Namespace: Get https://10.96.0.1:443/api/v1/namespaces?limit=500\u0026resourceVersion=0: dial tcp 10.96.0.1:443: i/o timeout\n","stream":"stderr","time":"2019-07-01T07:51:53.278754803Z"}
{"log":"ERROR: logging before flag.Parse: E0701 07:51:53.280424   25716 reflector.go:205] github.com/weaveworks/weave/prog/weave-npc/main.go:323: Failed to list *v1.NetworkPolicy: Get https://10.96.0.1:443/apis/networking.k8s.io/v1/networkpolicies?limit=500\u0026resourceVersion=0: dial tcp 10.96.0.1:443: i/o timeout\n","stream":"stderr","time":"2019-07-01T07:51:53.280526951Z"}
{"log":"ERROR: logging before flag.Parse: E0701 07:51:53.285744   25716 reflector.go:205] github.com/weaveworks/weave/prog/weave-npc/main.go:322: Failed to list *v1.Pod: Get https://10.96.0.1:443/api/v1/pods?limit=500\u0026resourceVersion=0: dial tcp 10.96.0.1:443: i/o timeout\n","stream":"stderr","time":"2019-07-01T07:51:53.28588935Z"}

设置 Kube 代理后，我们收到以下错误。

{“log”:“E0701 07:57:20.105121 1 reflector.go:126] k8s.io/client-go/informers/factory.go:133: Failed to list *v1.Service: Get https://101.53.145.68:6443/api/v1/services?labelSelector=!service.kubernetes.io%2Fservice-proxy-name\u0026limit=500\u0026resourceVersion=0: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)\n”,“stream”:“stderr”,“time”:“2019-07-01T07:57:20.105357775Z”}
{“log”:“E0701 07:57:20.107067 1 reflector.go:126] k8s.io/client-go/informers/factory.go:133: Failed to list *v1.Endpoints: Get https://101.53.145.68:6443/api/v1/endpoints?labelSelector=!service.kubernetes.io%2Fservice-proxy-name\u0026limit=500\u0026resourceVersion=0: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)\n”,“stream”:“stderr”,“time”:“2019-07-01T07:57:20.107170774Z”}

所有主机名都不同， 在此输入图像描述

答案1

所有节点都有不同的主机名吗？你能做kubectl get nodes -o wide并更新问题吗？另外，您是否在另一台计算机上创建了证书并将其复制到您的服务器？如果是，则用于生成证书的计算机的时间应与您将其复制到的服务器的时间相匹配，否则将导致访问问题。

相关内容