easzlab / kubeasz

使用Ansible脚本安装K8S集群,介绍组件交互原理,方便直接,不受国内网络环境影响
https://github.com/easzlab/kubeasz
10.53k stars 3.53k forks source link

kubeasz如何更新kube-apiserver的证书 #1402

Closed wsw136 closed 1 month ago

wsw136 commented 3 months ago

What happened? 发生了什么问题?

Aug 23 23:00:50 k8s-master-ns-t2 kube-scheduler[93576]: I0823 23:00:50.139248 93576 leaderelection.go:248] attempting to acquire leader lease kube-system/kube-scheduler... Aug 23 23:01:08 k8s-master-ns-t2 kube-scheduler[93576]: I0823 23:01:08.614476 93576 leaderelection.go:258] successfully acquired lease kube-system/kube-scheduler Aug 23 23:01:13 k8s-master-ns-t2 kube-scheduler[93576]: E0823 23:01:13.615229 93576 leaderelection.go:330] error retrieving resource lock kube-system/kube-scheduler: Get "https://127.0.0.1:6443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-scheduler?timeout=5s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)

What did you expect to happen? 期望的结果是什么?

证书平滑更新

How can we reproduce it (as minimally and precisely as possible)? 尽可能最小化、精确地描述如何复现问题

调度更新地很慢,然后kube-scheduler.service反复重启

Anything else we need to know? 其他需要说明的情况

No response

Kubernetes version k8s 版本

v1.23.14

Kubeasz version

i can't not makesure

OS version 操作系统版本

```console # On Linux: $ cat /etc/os-release # paste output here $ uname -a # paste output here ```centos7.9

Related plugins (CNI, CSI, ...) and versions (if applicable) 其他网络插件等需要说明的情况

flannel
github-actions[bot] commented 2 months ago

This issue is stale because it has been open for 30 days with no activity.

github-actions[bot] commented 1 month ago

This issue was closed because it has been inactive for 14 days since being marked as stale.