k8s haproxy Unable to connect to the server: x509: certificate is valid for 127.0.0.1, 10.0.1.12

kubeasz 启用ex-lb故障

Unable to connect to the server: x509: certificate is valid for 127.0.0.1, 10.0.1.12, 10.0.110.30, 10.68.0.1, 10.1.1.1, not 10.0.110.12

编辑/etc/kubernetes/ssl/kubernetes-csr.json

添加ip 10.0.110.12 到 hosts

重新生成 kubernets证书和密钥

/opt/kube/bin/cfssl gencert \
        -ca=/etc/kubernetes/ssl/ca.pem \
        -ca-key=/etc/kubernetes/ssl/ca-key.pem \
        -config=/etc/kubernetes/ssl/ca-config.json \
        -profile=kubernetes kubernetes-csr.json | /opt/kube/bin/cfssljson -bare kubernetes

重启kube-apiserver

systemctl restart kube-apiserver

完成