sealer
sealer copied to clipboard
certSANS配置没有生效
What happen?
使用 sealer run -f cluster.yaml 安装集群,创建的集群中,certSANs中没有配置中的IP,但是podCIDR可以生效。只包含默认的配置,不知道是bug还是使用方法不对?
certSANs:
- 127.0.0.1
- apiserver.cluster.local
- 10.103.97.2
- 192.168.0.65
- 192.168.0.238
- 192.168.0.112
- ::1
sealer version
cluster.yaml
apiVersion: sealer.cloud/v2
kind: Cluster
metadata:
name: my-cluster
spec:
certSANS:
- 192.168.0.65
- 192.168.0.238
- 192.168.0.112
- 10.56.253.168
- 192.168.0.253
- 10.56.253.160
image: kubernetes:v1-20-4-sealerio-2
ssh:
passwd: sss
user: root
port: "22"
hosts:
- ips: [ 192.168.0.65,192.168.0.238,192.168.0.112 ]
roles: [ master ]
env:
- etcd-dir=/data/etcd
ssh:
user: root
passwd: sss
port: "22"
- ips: [ 192.168.0.175 ]
roles: [ node ]
---
apiVersion: kubeadm.k8s.io/v1beta3
kind: ClusterConfiguration
kubernetesVersion: v1.20.4
networking:
podSubnet: 172.27.0.0/16
serviceSubnet: 172.18.128.0/19
apiServer:
certSANs:
- 192.168.0.65
- 192.168.0.238
- 192.168.0.112
- 10.56.253.168
- 192.168.0.253
- 10.56.253.160
- 127.0.0.1
- apiserver.cluster.local
---
apiVersion: sealer.aliyun.com/v1alpha1
kind: Config
metadata:
name: calico
spec:
path: applications/custom-resources.yaml
data: |
apiVersion: operator.tigera.io/v1
kind: Installation
metadata:
name: default
spec:
calicoNetwork:
ipPools:
- blockSize: 26
cidr: 172.27.0.0/16
Relevant log output?
No response
What you expected to happen?
No response
How to reproduce it (as minimally and precisely as possible)?
No response
Anything else we need to know?
No response
What is the version of Sealer you using?
{"gitVersion":"v0.9.3","gitCommit":"a51d0ec","buildDate":"2023-03-31 05:58:58","goVersion":"go1.17.13","compiler":"gc","platform":"linux/amd64"}
What is your OS environment?
CentOS 7.9
What is the Kernel version?
3.10.0-1160.49.1.el7.x86_64
Other environment you want to tell us?
- Cloud provider or hardware configuration:
- Install tools:
- Others:
@drinktee ,clusterfile中,可以使用env key 的方式 CertSANs
增加额外的ip。
(http://sealer.cool/docs/concept/clusterfile.html#using-cluster-env-in-clusterfile)
增加形如这种 格式的env,最终安装后 node 节点会无法join。时间太久保存日志了。