crul 请求kubelt 报错 大神们帮忙看看

[zdwork]

[root@kube-master work]# curl -v --capath /etc/kubernetes/cert/ --cacert /etc/kubernetes/cert/ca.pem --cert ./admin.pem --key ./admin-key.pem https://192.168.20.183:10250/metrics

• About to connect() to 192.168.20.183 port 10250 (#0)
• Trying 192.168.20.183...
• Connected to 192.168.20.183 (192.168.20.183) port 10250 (#0)
• Initializing NSS with certpath: sql:/etc/pki/nssdb
• failed to load '/etc/kubernetes/cert//ca-key.pem' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//ca-config.json' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//kubernetes-key.pem' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//proxy-client-key.pem' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//kube-controller-manager-key.pem' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//kube-scheduler-key.pem' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//kubelet-client-2019-05-28-09-49-56.pem' from CURLOPT_CAPATH
• failed to load '/etc/kubernetes/cert//kubelet-client-current.pem' from CURLOPT_CAPATH
• CAfile: /etc/kubernetes/cert/ca.pem CApath: /etc/kubernetes/cert/
• NSS error -12188 (SSL_ERROR_INTERNAL_ERROR_ALERT)
• Peer reports it experienced an internal error.
• Closing connection 0 curl: (35) Peer reports it experienced an internal error. [root@kube-master work]#

[opsnull]

去掉 --capath /etc/kubernetes/cert/ 看看。