k8s系列之:Unable to connect to the server: x509: certificate signed by unknown authority
K8s使用kubeadm reset初始化k8S集群,再使用
kubectl get pods -n kube-system查看Pod出现如下报错:
- Unable to connect to the server: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)
解决方法是:注意解决步骤
首先执行 kubeadm reset
kubeadm reset
再删除$HOME/.kube
rm -rf $HOME/.kube
再创建$HOME/.kube
[root@bigdata1 manifests]# mkdir -p $HOME/.kube
[root@bigdata1 manifests]# sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
[root@bigdata1 manifests]# sudo chown $(id -u):$(id -g) $HOME/.kube/config
再次使用kubectl get pods即可成功查看
kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-6d8c4cb4d-pqcqz 1/1 Running 0 8m46s
coredns-6d8c4cb4d-tdvkj 1/1 Running 0 8m46s
etcd-bigdata1 1/1 Running 9 8m59s
kube-apiserver-bigdata1 1/1 Running 105 8m59s
kube-controller-manager-bigdata1 1/1 Running 8 8m59s
kube-proxy-mr4rk 1/1 Running 0 8m46s
kube-scheduler-bigdata1 1/1 Running 8 8m59s
再次使用kubectl get cs即可成功查看
[root@bigdata1 manifests]# kubectl get cs
Warning: v1 ComponentStatus is deprecated in v1.19+
NAME STATUS MESSAGE ERROR
controller-manager Healthy ok
etcd-0 Healthy {"health":"true","reason":""}
scheduler Healthy ok