LearnKubernetes icon indicating copy to clipboard operation
LearnKubernetes copied to clipboard

Added etcd-certfile and etcd-keyfile options

Open hahasheminejad opened this issue 5 years ago • 0 comments

I think as etcd is configured to use CA and keys for authentication, we need to provide kube-apiserver with these two files.

Without them, I was getting the following errors after each systemctl reload kube-apiserver

I0925 22:21:51.570292    2528 endpoint.go:66] ccResolverWrapper: sending new addresses to cc: [{https://etcd1.example.com:2379 0  <nil>}]
W0925 22:21:51.575195    2528 clientconn.go:1120] grpc: addrConn.createTransport failed to connect to {https://etcd1.example.com:2379 0  <nil>}. Err :connection error: desc = "transport: authentication handshake failed: remote error: tls: bad certificate". Reconnecting...
I0925 22:21:52.575910    2528 client.go:361] parsed scheme: "endpoint"
I0925 22:21:52.577217    2528 endpoint.go:66] ccResolverWrapper: sending new addresses to cc: [{https://etcd1.example.com:2379 0  <nil>}]
W0925 22:21:52.607232    2528 clientconn.go:1120] grpc: addrConn.createTransport failed to connect to {https://etcd1.example.com:2379 0  <nil>}. Err :connection error: desc = "transport: authentication handshake failed: remote error: tls: bad certificate". Reconnecting...
W0925 22:21:52.609382    2528 clientconn.go:1120] grpc: addrConn.createTransport failed to connect to {https://etcd1.example.com:2379 0  <nil>}. Err :connection error: desc = "transport: authentication handshake failed: remote error: tls: bad certificate". Reconnecting...

hahasheminejad avatar Sep 25 '19 12:09 hahasheminejad