解决node加入集群时token过期的问题

方胜新

于 2019-07-05 12:54:38 发布

阅读量972

点赞数

分类专栏： K8S 文章标签： k8s token过期

本文链接：https://blog.csdn.net/qq_21713697/article/details/94722107

版权

本文档详细介绍了在尝试将work node加入Kubernetes集群时遇到token过期错误的情况。错误提示包括'Unauthorized'。解决方案是通过运行'kubeadm token create'命令生成新的token，然后使用新token进行节点加入操作，从而成功加入集群。

摘要由CSDN通过智能技术生成

1）问题：当work node加入k8s集群时出现类似如下错误时“You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
unable to fetch the kubeadm-config ConfigMap: failed to get config map: Unauthorized”。完整的提示可能类似如下所示：

root@ubuntu1804-k8-s5:~# kubeadm join 10.30.28.230:8443 --token x5h1nq.v922xzw40l6y2h3u --discovery-token-ca-cert-hash sha256:76b907a90281adbda66a40ac37c06ea864e89c960a49679bc698f3642fd05a51
[preflight] Running pre-flight checks
[WARNING SystemVerification]: this Docker version is not on the list of validated versions: 18.09.2. Latest validated version: 18.06
[discovery] Trying to connect to API Server "10.30.28.230:8443"
[discovery] Created cluster-info discovery client, requesting info from "https://10.30.28.230:8443"
[discovery] Requesting info from "https://10.30.28.230:8443" again to validate TLS against the pinned public key
[dis