K8S NodePort无法访问MySQL

K8s单机部署填坑

1. 设置Docker存储路径

• 1.13.1 或者其它版本开始，要设置daemon.json的字段为“graph”，较早版本“data-root”

{
   
"registry-mirrors":["http://hub-mirror.c.163.com"],
"graph":"/data/docker"
}

2. kubectl create -f yaml后一直ContainerCreating

1. 检查后发现如下错误

   Error syncing pod 80f69868-53a8-11ea-aa0f-080027d3bf90, skipping: failed to “StartContainer” for “POD” with ErrImagePull: “image pull failed for registry.access.redhat.com/rhel7/pod-infrastructure:latest, this may be because there are no credentials on this request. details: (open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory)”

2. 诊断，

   CentOS7的pytho-rhsm-certificates被替换成空包，需要自己解决证书的问题

3. 解决

   $ sudo -i && cd /tmp $ wget http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm
   [root@vm-001]$ rpm2cpio python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem