无法获取nodes信息，kubelet.kubeconfig 没有生成，只生成了kubelet-client.key

[xlyoung]

通过了CSR认证，却没有获取到nodes的信息

[root@k8s-01 ssl]# kubectl get csr NAME AGE REQUESTOR CONDITION csr-b0gpz 6m kubelet-bootstrap Pending csr-swnf0 27m kubelet-bootstrap Pending [root@k8s-01 ssl]# kubectl certificate approve csr-b0gpz csr-swnf0 certificatesigningrequest "csr-b0gpz" approved certificatesigningrequest "csr-swnf0" approved [root@k8s-01 ssl]# kubectl get nodes No resources found. [root@k8s-01 ssl]#

[opsnull]

看看 kubelet 的日志有没有 Error、Warning 类的信息。

[SchoIsles]

同样的问题，我是kubelet节点重做系统了，但之前已经执行kubectl delete node了

[SchoIsles]

kubelet log

I1201 22:54:13.154470   12258 bootstrap.go:58] Using bootstrap kubeconfig to generate TLS client cert, key and kubeconfig file
I1201 22:54:13.182429   12258 csr.go:96] csr for this node already exists, reusing
I1201 22:54:13.184398   12258 csr.go:104] csr for this node is still valid

新的csr没有Issued字段

kubectl get csr
NAME                                                   AGE       REQUESTOR           CONDITION
node-csr-26tFi5G_KKEZsg97-xxxxxx   74d       kubelet-bootstrap   Approved,Issued
node-csr-IlppavoR8QDyDruqsxxxxxx   5m        kubelet-bootstrap   Approved
node-csr-K9fSKHorWHsmTl4xxxxxx   136d      kubelet-bootstrap   Approved,Issued

[SchoIsles]

换了一个apiserver后莫名好了，详细待查

[zhangbei59]

解决了吗？

[lijunyong]

@okletswin 我也遇到了，你怎么解决的？

[SchoIsles]

@lijunyong 集群里有3个apiserver，在写kubeconfig时填了其它实例的地址，就好了。。。

[MikelPan]

我今天也遇到了这个问题，不知道怎么解决

[caoban]

你们是怎么解决的？

[lizimuqw]

通过了CSR认证，却没有获取到nodes的信息

[root@k8s-01 ssl]# kubectl get csr NAME AGE REQUESTOR CONDITION csr-b0gpz 6m kubelet-bootstrap Pending csr-swnf0 27m kubelet-bootstrap Pending [root@k8s-01 ssl]# kubectl certificate approve csr-b0gpz csr-swnf0 certificatesigningrequest "csr-b0gpz" approved certificatesigningrequest "csr-swnf0" approved [root@k8s-01 ssl]# kubectl get nodes No resources found. [root@k8s-01 ssl]#

有approved 但没有issued，是因为申请通过认证但是没有正常颁发证书。查看一下kube-controller-manager的日志是不是报错了

[zhangbei59]

3q

---原始邮件--- 发件人: "lizimuqw"<[email protected]> 发送时间: 2020年9月16日(周三) 下午3:50 收件人: "opsnull/follow-me-install-kubernetes-cluster"<[email protected]>; 抄送: "Comment"<[email protected]>;"Bekey"<[email protected]>; 主题: Re: [opsnull/follow-me-install-kubernetes-cluster] 无法获取nodes信息，kubelet.kubeconfig 没有生成，只生成了kubelet-client.key (#157)

通过了CSR认证，却没有获取到nodes的信息

[root@k8s-01 ssl]# kubectl get csr NAME AGE REQUESTOR CONDITION csr-b0gpz 6m kubelet-bootstrap Pending csr-swnf0 27m kubelet-bootstrap Pending [root@k8s-01 ssl]# kubectl certificate approve csr-b0gpz csr-swnf0 certificatesigningrequest "csr-b0gpz" approved certificatesigningrequest "csr-swnf0" approved [root@k8s-01 ssl]# kubectl get nodes No resources found. [root@k8s-01 ssl]#

有approved 但没有issued，是因为申请通过认证但是没有正常颁发证书。查看一下kube-controller-manager的日志是不是报错了

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

[yyds-tang]

查看kube-controller-manager是否报错，我的是这个问题