xiaoping

很诡异的问题，我也遇到了, 这个现象不知道怎么导致的，可以如下修复 ~~validatingwebhookconfiguraitons里的caBundle和 secret里的tls.crt明明是一致的~~ 修改向apiserver注册的根证书，和webhook里secret使用的保持一致 - validatingwebhookconfiguration/validations.core.kubefed.io里的caBundle - mutatingwebhookconfiguration/mutation.core.kubfefed.io里的caBundle - secrets/kubefed-admission-webhook-serving-cert中的tls.crt 把tls.crt复制覆盖掉这两处的caBundle，重启 ns/kube-federation-system里的controller-manager，即可解决问题

可能上游已经修了这个问题， https://github.com/kubernetes-sigs/kubefed/pull/1490

kubectl apply -f [files-rbac.yml](https://gist.github.com/Bregor/66a4ce55a4d84b631419b81c7b97b5b9) Worked. all pods are running

kubeadm is more eaiser ... but this project is more flexible

I am new to Deis, i am looking up the solution which it supports teams on k8s, In my opinion, the easiest way is to make multi controllers available on...