search

gokube / step-by-step-install-kubernetes-cluster

一步一步安装k8s集群 bakup
Other
0 stars 1 forks source link

kube-controller-manager集群部署不成功 #1

Open jiel168 opened 4 years ago

jiel168 commented 4 years ago

你好，有个问题请教

我的环境是centos7.6，2c4g，京东云云主机，网络配置全通 [root@zhangjun-k8s01 tmp]# uname -a Linux zhangjun-k8s01 3.10.0-957.el7.x86_64 #1 SMP Thu Nov 8 23:39:32 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

完全按照文档描述进行部署，所有配置都一样

06-2步骤出现错误 [root@zhangjun-k8s01 tmp]# systemctl status kube-controller-manager ● kube-controller-manager.service - Kubernetes Controller Manager Loaded: loaded (/etc/systemd/system/kube-controller-manager.service; enabled; vendor preset: disabled) Active: activating (auto-restart) (Result: exit-code) since Mon 2019-12-09 08:37:57 CST; 1s ago Docs: https://github.com/GoogleCloudPlatform/kubernetes Process: 22318 ExecStart=/opt/k8s/bin/kube-controller-manager --profiling --cluster-name=kubernetes --controllers=*,bootstrapsigner,tokencleaner --kube-api-qps=1000 --kube-api-burst=2000 --leader-elect --use-service-account-credentials --concurrent-service-syncs=2 --bind-address=172.27.137.240 --secure-port=10252 --tls-cert-file=/etc/kubernetes/cert/kube-controller-manager.pem --tls-private-key-file=/etc/kubernetes/cert/kube-controller-manager-key.pem --port=0 --authentication-kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig --client-ca-file=/etc/kubernetes/cert/ca.pem --requestheader-allowed-names="" --requestheader-client-ca-file=/etc/kubernetes/cert/ca.pem --requestheader-extra-headers-prefix="X-Remote-Extra-" --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --authorization-kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig --cluster-signing-cert-file=/etc/kubernetes/cert/ca.pem --cluster-signing-key-file=/etc/kubernetes/cert/ca-key.pem --experimental-cluster-signing-duration=876000h --horizontal-pod-autoscaler-sync-period=10s --concurrent-deployment-syncs=10 --concurrent-gc-syncs=30 --node-cidr-mask-size=24 --service-cluster-ip-range=10.254.0.0/16 --pod-eviction-timeout=6m --terminated-pod-gc-threshold=10000 --root-ca-file=/etc/kubernetes/cert/ca.pem --service-account-private-key-file=/etc/kubernetes/cert/ca-key.pem --kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig --logtostderr=true --v=2 (code=exited, status=1/FAILURE) Main PID: 22318 (code=exited, status=1/FAILURE)

Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405845 22318 flags.go:33] FLAG: --tls-cipher-suites="[]" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405854 22318 flags.go:33] FLAG: --tls-min-version="" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405859 22318 flags.go:33] FLAG: --tls-private-key-file="/etc/kubernetes/c...key.pem" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405865 22318 flags.go:33] FLAG: --tls-sni-cert-key="[]" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405877 22318 flags.go:33] FLAG: --unhealthy-zone-threshold="0.55" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405883 22318 flags.go:33] FLAG: --use-service-account-credentials="true" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405888 22318 flags.go:33] FLAG: --v="2" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405893 22318 flags.go:33] FLAG: --version="false" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: I1209 08:37:57.405903 22318 flags.go:33] FLAG: --vmodule="" Dec 09 08:37:57 zhangjun-k8s01 kube-controller-manager[22318]: empty value in "requestheader-allowed-names" Hint: Some lines were ellipsized, use -l to show in full.

请帮忙看一下可能原因，谢谢

yangshun2005 commented 4 years ago

把网络和kube-controller-manager的启动步骤、日志贴出来吧

jiel168 commented 4 years ago

kube-controller-manager的日志 [root@zhangjun-k8s01 ~]# journalctl -u kube-controller-manager -- Logs begin at Fri 2019-12-06 16:53:48 CST, end at Mon 2019-12-09 15:30:45 CST. -- Dec 07 14:06:25 zhangjun-k8s01 systemd[1]: Started Kubernetes Controller Manager. Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: Flag --port has been deprecated, see --secure-port instead. Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419206 31713 flags.go:33] FLAG: --add-dir-header="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419254 31713 flags.go:33] FLAG: --address="0.0.0.0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419260 31713 flags.go:33] FLAG: --allocate-node-cidrs="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419265 31713 flags.go:33] FLAG: --allow-untagged-cloud="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419275 31713 flags.go:33] FLAG: --alsologtostderr="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419285 31713 flags.go:33] FLAG: --attach-detach-reconcile-sync-period="1m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419291 31713 flags.go:33] FLAG: --authentication-kubeconfig="/etc/kubernetes/kube-controller-manager.kubeconfig" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419297 31713 flags.go:33] FLAG: --authentication-skip-lookup="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419302 31713 flags.go:33] FLAG: --authentication-token-webhook-cache-ttl="10s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419306 31713 flags.go:33] FLAG: --authentication-tolerate-lookup-failure="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419310 31713 flags.go:33] FLAG: --authorization-always-allow-paths="[/healthz]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419328 31713 flags.go:33] FLAG: --authorization-kubeconfig="/etc/kubernetes/kube-controller-manager.kubeconfig" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419333 31713 flags.go:33] FLAG: --authorization-webhook-cache-authorized-ttl="10s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419338 31713 flags.go:33] FLAG: --authorization-webhook-cache-unauthorized-ttl="10s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419343 31713 flags.go:33] FLAG: --bind-address="172.27.137.240" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419348 31713 flags.go:33] FLAG: --cert-dir="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419352 31713 flags.go:33] FLAG: --cidr-allocator-type="RangeAllocator" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419357 31713 flags.go:33] FLAG: --client-ca-file="/etc/kubernetes/cert/ca.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419361 31713 flags.go:33] FLAG: --cloud-config="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419369 31713 flags.go:33] FLAG: --cloud-provider="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419373 31713 flags.go:33] FLAG: --cloud-provider-gce-lb-src-cidrs="130.211.0.0/22,209.85.152.0/22,209.85.204.0/22,35.191.0.0/16" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419381 31713 flags.go:33] FLAG: --cluster-cidr="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419385 31713 flags.go:33] FLAG: --cluster-name="kubernetes" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419396 31713 flags.go:33] FLAG: --cluster-signing-cert-file="/etc/kubernetes/cert/ca.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419401 31713 flags.go:33] FLAG: --cluster-signing-key-file="/etc/kubernetes/cert/ca-key.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419409 31713 flags.go:33] FLAG: --concurrent-deployment-syncs="10" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419416 31713 flags.go:33] FLAG: --concurrent-endpoint-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419420 31713 flags.go:33] FLAG: --concurrent-gc-syncs="30" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419425 31713 flags.go:33] FLAG: --concurrent-namespace-syncs="10" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419429 31713 flags.go:33] FLAG: --concurrent-replicaset-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419433 31713 flags.go:33] FLAG: --concurrent-resource-quota-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419437 31713 flags.go:33] FLAG: --concurrent-service-endpoint-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419444 31713 flags.go:33] FLAG: --concurrent-service-syncs="2" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419449 31713 flags.go:33] FLAG: --concurrent-serviceaccount-token-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419454 31713 flags.go:33] FLAG: --concurrent-statefulset-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419458 31713 flags.go:33] FLAG: --concurrent-ttl-after-finished-syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419462 31713 flags.go:33] FLAG: --concurrent_rc_syncs="5" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419467 31713 flags.go:33] FLAG: --configure-cloud-routes="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419471 31713 flags.go:33] FLAG: --contention-profiling="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419475 31713 flags.go:33] FLAG: --controller-start-interval="0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419483 31713 flags.go:33] FLAG: --controllers="[*,bootstrapsigner,tokencleaner]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419495 31713 flags.go:33] FLAG: --deleting-pods-burst="0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419499 31713 flags.go:33] FLAG: --deleting-pods-qps="0.1" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419511 31713 flags.go:33] FLAG: --deployment-controller-sync-period="30s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419516 31713 flags.go:33] FLAG: --disable-attach-detach-reconcile-sync="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419520 31713 flags.go:33] FLAG: --enable-dynamic-provisioning="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419525 31713 flags.go:33] FLAG: --enable-garbage-collector="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419532 31713 flags.go:33] FLAG: --enable-hostpath-provisioner="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419537 31713 flags.go:33] FLAG: --enable-taint-manager="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419541 31713 flags.go:33] FLAG: --endpoint-updates-batch-period="0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419546 31713 flags.go:33] FLAG: --experimental-cluster-signing-duration="876000h0m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419550 31713 flags.go:33] FLAG: --external-cloud-volume-plugin="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419554 31713 flags.go:33] FLAG: --feature-gates="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419561 31713 flags.go:33] FLAG: --flex-volume-plugin-dir="/usr/libexec/kubernetes/kubelet-plugins/volume/exec/" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419569 31713 flags.go:33] FLAG: --help="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419574 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-cpu-initialization-period="5m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419578 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-downscale-delay="5m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419583 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-downscale-stabilization="5m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419587 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-initial-readiness-delay="30s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419592 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-sync-period="10s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419596 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-tolerance="0.1" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419606 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-upscale-delay="3m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419617 31713 flags.go:33] FLAG: --horizontal-pod-autoscaler-use-rest-clients="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419621 31713 flags.go:33] FLAG: --http2-max-streams-per-connection="0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419627 31713 flags.go:33] FLAG: --kube-api-burst="2000" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419631 31713 flags.go:33] FLAG: --kube-api-content-type="application/vnd.kubernetes.protobuf" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419636 31713 flags.go:33] FLAG: --kube-api-qps="1000" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419641 31713 flags.go:33] FLAG: --kubeconfig="/etc/kubernetes/kube-controller-manager.kubeconfig" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419650 31713 flags.go:33] FLAG: --large-cluster-size-threshold="50" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419654 31713 flags.go:33] FLAG: --leader-elect="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419659 31713 flags.go:33] FLAG: --leader-elect-lease-duration="15s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419664 31713 flags.go:33] FLAG: --leader-elect-renew-deadline="10s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419668 31713 flags.go:33] FLAG: --leader-elect-resource-lock="endpointsleases" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419673 31713 flags.go:33] FLAG: --leader-elect-resource-name="kube-controller-manager" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419677 31713 flags.go:33] FLAG: --leader-elect-resource-namespace="kube-system" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419685 31713 flags.go:33] FLAG: --leader-elect-retry-period="2s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419690 31713 flags.go:33] FLAG: --log-backtrace-at=":0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419698 31713 flags.go:33] FLAG: --log-dir="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419702 31713 flags.go:33] FLAG: --log-file="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419706 31713 flags.go:33] FLAG: --log-file-max-size="1800" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419711 31713 flags.go:33] FLAG: --log-flush-frequency="5s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419720 31713 flags.go:33] FLAG: --logtostderr="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419729 31713 flags.go:33] FLAG: --master="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419733 31713 flags.go:33] FLAG: --max-endpoints-per-slice="100" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419738 31713 flags.go:33] FLAG: --min-resync-period="12h0m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419743 31713 flags.go:33] FLAG: --namespace-sync-period="5m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419747 31713 flags.go:33] FLAG: --node-cidr-mask-size="24" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419752 31713 flags.go:33] FLAG: --node-cidr-mask-size-ipv4="0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419756 31713 flags.go:33] FLAG: --node-cidr-mask-size-ipv6="0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419764 31713 flags.go:33] FLAG: --node-eviction-rate="0.1" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419769 31713 flags.go:33] FLAG: --node-monitor-grace-period="40s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419774 31713 flags.go:33] FLAG: --node-monitor-period="5s" Dec 07 14:06:25 zhangjun-k8s01 systemd[1]: kube-controller-manager.service: main process exited, code=exited, status=1/FAILURE Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419778 31713 flags.go:33] FLAG: --node-startup-grace-period="1m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419783 31713 flags.go:33] FLAG: --node-sync-period="0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419787 31713 flags.go:33] FLAG: --pod-eviction-timeout="6m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419791 31713 flags.go:33] FLAG: --port="0" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419796 31713 flags.go:33] FLAG: --profiling="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419803 31713 flags.go:33] FLAG: --pv-recycler-increment-timeout-nfs="30" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419808 31713 flags.go:33] FLAG: --pv-recycler-minimum-timeout-hostpath="60" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419812 31713 flags.go:33] FLAG: --pv-recycler-minimum-timeout-nfs="300" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419823 31713 flags.go:33] FLAG: --pv-recycler-pod-template-filepath-hostpath="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419827 31713 flags.go:33] FLAG: --pv-recycler-pod-template-filepath-nfs="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419832 31713 flags.go:33] FLAG: --pv-recycler-timeout-increment-hostpath="30" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419836 31713 flags.go:33] FLAG: --pvclaimbinder-sync-period="15s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419844 31713 flags.go:33] FLAG: --register-retry-count="10" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419849 31713 flags.go:33] FLAG: --requestheader-allowed-names="[]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419860 31713 flags.go:33] FLAG: --requestheader-client-ca-file="/etc/kubernetes/cert/ca.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419865 31713 flags.go:33] FLAG: --requestheader-extra-headers-prefix="[X-Remote-Extra-]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419879 31713 flags.go:33] FLAG: --requestheader-group-headers="[X-Remote-Group]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419897 31713 flags.go:33] FLAG: --requestheader-username-headers="[X-Remote-User]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419910 31713 flags.go:33] FLAG: --resource-quota-sync-period="5m0s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419918 31713 flags.go:33] FLAG: --root-ca-file="/etc/kubernetes/cert/ca.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419923 31713 flags.go:33] FLAG: --route-reconciliation-period="10s" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419927 31713 flags.go:33] FLAG: --secondary-node-eviction-rate="0.01" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419932 31713 flags.go:33] FLAG: --secure-port="10252" Dec 07 14:06:25 zhangjun-k8s01 systemd[1]: Unit kube-controller-manager.service entered failed state. Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419937 31713 flags.go:33] FLAG: --service-account-private-key-file="/etc/kubernetes/cert/ca-key.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419942 31713 flags.go:33] FLAG: --service-cluster-ip-range="10.254.0.0/16" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419947 31713 flags.go:33] FLAG: --skip-headers="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419955 31713 flags.go:33] FLAG: --skip-log-headers="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419959 31713 flags.go:33] FLAG: --stderrthreshold="2" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419969 31713 flags.go:33] FLAG: --terminated-pod-gc-threshold="10000" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419973 31713 flags.go:33] FLAG: --tls-cert-file="/etc/kubernetes/cert/kube-controller-manager.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419979 31713 flags.go:33] FLAG: --tls-cipher-suites="[]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419993 31713 flags.go:33] FLAG: --tls-min-version="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.419997 31713 flags.go:33] FLAG: --tls-private-key-file="/etc/kubernetes/cert/kube-controller-manager-key.pem" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.420003 31713 flags.go:33] FLAG: --tls-sni-cert-key="[]" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.420015 31713 flags.go:33] FLAG: --unhealthy-zone-threshold="0.55" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.420020 31713 flags.go:33] FLAG: --use-service-account-credentials="true" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.420025 31713 flags.go:33] FLAG: --v="2" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.420029 31713 flags.go:33] FLAG: --version="false" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: I1207 14:06:25.420038 31713 flags.go:33] FLAG: --vmodule="" Dec 07 14:06:25 zhangjun-k8s01 kube-controller-manager[31713]: empty value in "requestheader-allowed-names" Dec 07 14:06:25 zhangjun-k8s01 systemd[1]: kube-controller-manager.service failed. Dec 07 14:06:30 zhangjun-k8s01 systemd[1]: kube-controller-manager.service holdoff time over, scheduling restart. Dec 07 14:06:30 zhangjun-k8s01 systemd[1]: Stopped Kubernetes Controller Manager. Dec 07 14:06:30 zhangjun-k8s01 systemd[1]: Started Kubernetes Controller Manager.

jiel168 commented 4 years ago

网络用的是flanneld，日志如下 [root@zhangjun-k8s01 ~]# journalctl -u network -- Logs begin at Fri 2019-12-06 16:53:48 CST, end at Mon 2019-12-09 15:32:13 CST. -- Dec 06 16:53:58 centos76 systemd[1]: Starting LSB: Bring up/down networking... Dec 06 16:53:59 centos76 network[2761]: Bringing up loopback interface: [ OK ] Dec 06 16:53:59 centos76 network[2761]: Bringing up interface eth0: [ OK ] Dec 06 16:53:59 centos76 systemd[1]: Started LSB: Bring up/down networking. [root@zhangjun-k8s01 ~]# journalctl -u flanneld -- Logs begin at Fri 2019-12-06 16:53:48 CST, end at Mon 2019-12-09 15:32:58 CST. -- Dec 07 12:38:32 zhangjun-k8s01 systemd[1]: Starting Flanneld overlay address etcd agent... Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371094 10760 main.go:527] Using interface with name eth0 and address 172.27.137.240 Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371148 10760 main.go:544] Defaulting external address to interface address (172.27.137.240) Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: warning: ignoring ServerName for user-provided CA for backwards compatibility is deprecated Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371886 10760 main.go:244] Created subnet manager: Etcd Local Manager with Previous Subnet: None Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371895 10760 main.go:247] Installing signal handlers Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.393730 10760 main.go:386] Found network config - Backend type: vxlan Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.393765 10760 vxlan.go:120] VXLAN config: VNI=1 Port=0 GBP=false DirectRouting=false Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.406681 10760 local_manager.go:234] Picking subnet in range 172.30.8.0 ... 172.30.248.0 Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.408042 10760 local_manager.go:220] Allocated lease (172.30.176.0/21) to current node (172.27.137.240) Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.408257 10760 main.go:351] Current network or subnet (172.30.0.0/16, 172.30.176.0/21) is not equal to previous one (0.0.0.0/0, 0.0.0.0/0), trying to recycle old iptables rules Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.411036 10760 iptables.go:167] Deleting iptables rule: -s 0.0.0.0/0 -d 0.0.0.0/0 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.411914 10760 iptables.go:167] Deleting iptables rule: -s 0.0.0.0/0 ! -d 224.0.0.0/4 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.413132 10760 iptables.go:167] Deleting iptables rule: ! -s 0.0.0.0/0 -d 0.0.0.0/0 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.414309 10760 iptables.go:167] Deleting iptables rule: ! -s 0.0.0.0/0 -d 0.0.0.0/0 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.416363 10760 main.go:317] Wrote subnet file to /run/flannel/subnet.env Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.416373 10760 main.go:321] Running backend. Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.416898 10760 vxlan_network.go:60] watching for new subnet leases Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.421099 10760 iptables.go:145] Some iptables rules are missing; deleting and recreating rules Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.421109 10760 iptables.go:167] Deleting iptables rule: -s 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.422015 10760 iptables.go:167] Deleting iptables rule: -d 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.422933 10760 iptables.go:155] Adding iptables rule: -s 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.424776 10760 iptables.go:155] Adding iptables rule: -d 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.424907 10760 main.go:429] Waiting for 23h0m0.003758066s to renew lease Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.427686 10760 iptables.go:145] Some iptables rules are missing; deleting and recreating rules Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.427696 10760 iptables.go:167] Deleting iptables rule: -s 172.30.0.0/16 -d 172.30.0.0/16 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.435978 10760 iptables.go:167] Deleting iptables rule: -s 172.30.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.437875 10760 iptables.go:167] Deleting iptables rule: ! -s 172.30.0.0/16 -d 172.30.176.0/21 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 systemd[1]: Started Flanneld overlay address etcd agent. Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.439221 10760 iptables.go:167] Deleting iptables rule: ! -s 172.30.0.0/16 -d 172.30.0.0/16 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.441172 10760 iptables.go:155] Adding iptables rule: -s 172.30.0.0/16 -d 172.30.0.0/16 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.444966 10760 iptables.go:155] Adding iptables rule: -s 172.30.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.461438 10760 iptables.go:155] Adding iptables rule: ! -s 172.30.0.0/16 -d 172.30.176.0/21 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.463606 10760 iptables.go:155] Adding iptables rule: ! -s 172.30.0.0/16 -d 172.30.0.0/16 -j MASQUERADE Dec 08 11:38:32 zhangjun-k8s01 flanneld[10760]: I1208 11:38:32.434774 10760 main.go:421] Lease renewed, new expiration: 2019-12-09 03:38:32.457573315 +0000 UTC Dec 08 11:38:32 zhangjun-k8s01 flanneld[10760]: I1208 11:38:32.438558 10760 main.go:429] Waiting for 23h0m0.019019386s to renew lease Dec 09 10:38:33 zhangjun-k8s01 flanneld[10760]: I1209 10:38:32.595688 10760 main.go:421] Lease renewed, new expiration: 2019-12-10 02:38:32.615637519 +0000 UTC Dec 09 10:38:33 zhangjun-k8s01 flanneld[10760]: I1209 10:38:32.597028 10760 main.go:429] Waiting for 23h0m0.018616862s to renew lease

kubegogo commented 4 years ago

empty value in "requestheader-allowed-names" 检查证书

From William.YangShun email

From: jiel168 notifications@github.com Sent: Monday, December 9, 2019 3:34:20 PM To: gokube/step-by-step-install-kubernetes-cluster step-by-step-install-kubernetes-cluster@noreply.github.com Cc: Subscribed subscribed@noreply.github.com Subject: Re: [gokube/step-by-step-install-kubernetes-cluster] kube-controller-manager集群部署不成功 (#1)

网络用的是flanneld，日志如下 [root@zhangjun-k8s01 ~]# journalctl -u network -- Logs begin at Fri 2019-12-06 16:53:48 CST, end at Mon 2019-12-09 15:32:13 CST. -- Dec 06 16:53:58 centos76 systemd[1]: Starting LSB: Bring up/down networking... Dec 06 16:53:59 centos76 network[2761]: Bringing up loopback interface: [ OK ] Dec 06 16:53:59 centos76 network[2761]: Bringing up interface eth0: [ OK ] Dec 06 16:53:59 centos76 systemd[1]: Started LSB: Bring up/down networking. [root@zhangjun-k8s01 ~]# journalctl -u flanneld -- Logs begin at Fri 2019-12-06 16:53:48 CST, end at Mon 2019-12-09 15:32:58 CST. -- Dec 07 12:38:32 zhangjun-k8s01 systemd[1]: Starting Flanneld overlay address etcd agent... Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371094 10760 main.go:527] Using interface with name eth0 and address 172.27.137.240 Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371148 10760 main.go:544] Defaulting external address to interface address (172.27.137.240) Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: warning: ignoring ServerName for user-provided CA for backwards compatibility is deprecated Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371886 10760 main.go:244] Created subnet manager: Etcd Local Manager with Previous Subnet: None Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.371895 10760 main.go:247] Installing signal handlers Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.393730 10760 main.go:386] Found network config - Backend type: vxlan Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.393765 10760 vxlan.go:120] VXLAN config: VNI=1 Port=0 GBP=false DirectRouting=false Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.406681 10760 local_manager.go:234] Picking subnet in range 172.30.8.0 ... 172.30.248.0 Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.408042 10760 local_manager.go:220] Allocated lease (172.30.176.0/21) to current node (172.27.137.240) Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.408257 10760 main.go:351] Current network or subnet (172.30.0.0/16, 172.30.176.0/21) is not equal to previous one (0.0.0.0/0, 0.0.0.0/0), trying to recycle old iptables rules Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.411036 10760 iptables.go:167] Deleting iptables rule: -s 0.0.0.0/0 -d 0.0.0.0/0 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.411914 10760 iptables.go:167] Deleting iptables rule: -s 0.0.0.0/0 ! -d 224.0.0.0/4 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.413132 10760 iptables.go:167] Deleting iptables rule: ! -s 0.0.0.0/0 -d 0.0.0.0/0 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.414309 10760 iptables.go:167] Deleting iptables rule: ! -s 0.0.0.0/0 -d 0.0.0.0/0 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.416363 10760 main.go:317] Wrote subnet file to /run/flannel/subnet.env Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.416373 10760 main.go:321] Running backend. Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.416898 10760 vxlan_network.go:60] watching for new subnet leases Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.421099 10760 iptables.go:145] Some iptables rules are missing; deleting and recreating rules Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.421109 10760 iptables.go:167] Deleting iptables rule: -s 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.422015 10760 iptables.go:167] Deleting iptables rule: -d 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.422933 10760 iptables.go:155] Adding iptables rule: -s 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.424776 10760 iptables.go:155] Adding iptables rule: -d 172.30.0.0/16 -j ACCEPT Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.424907 10760 main.go:429] Waiting for 23h0m0.003758066s to renew lease Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.427686 10760 iptables.go:145] Some iptables rules are missing; deleting and recreating rules Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.427696 10760 iptables.go:167] Deleting iptables rule: -s 172.30.0.0/16 -d 172.30.0.0/16 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.435978 10760 iptables.go:167] Deleting iptables rule: -s 172.30.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.437875 10760 iptables.go:167] Deleting iptables rule: ! -s 172.30.0.0/16 -d 172.30.176.0/21 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 systemd[1]: Started Flanneld overlay address etcd agent. Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.439221 10760 iptables.go:167] Deleting iptables rule: ! -s 172.30.0.0/16 -d 172.30.0.0/16 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.441172 10760 iptables.go:155] Adding iptables rule: -s 172.30.0.0/16 -d 172.30.0.0/16 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.444966 10760 iptables.go:155] Adding iptables rule: -s 172.30.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.461438 10760 iptables.go:155] Adding iptables rule: ! -s 172.30.0.0/16 -d 172.30.176.0/21 -j RETURN Dec 07 12:38:32 zhangjun-k8s01 flanneld[10760]: I1207 12:38:32.463606 10760 iptables.go:155] Adding iptables rule: ! -s 172.30.0.0/16 -d 172.30.0.0/16 -j MASQUERADE Dec 08 11:38:32 zhangjun-k8s01 flanneld[10760]: I1208 11:38:32.434774 10760 main.go:421] Lease renewed, new expiration: 2019-12-09 03:38:32.457573315 +0000 UTC Dec 08 11:38:32 zhangjun-k8s01 flanneld[10760]: I1208 11:38:32.438558 10760 main.go:429] Waiting for 23h0m0.019019386s to renew lease Dec 09 10:38:33 zhangjun-k8s01 flanneld[10760]: I1209 10:38:32.595688 10760 main.go:421] Lease renewed, new expiration: 2019-12-10 02:38:32.615637519 +0000 UTC Dec 09 10:38:33 zhangjun-k8s01 flanneld[10760]: I1209 10:38:32.597028 10760 main.go:429] Waiting for 23h0m0.018616862s to renew lease

― You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/gokube/step-by-step-install-kubernetes-cluster/issues/1?email_source=notifications&email_token=AM4QYITXIQOXKTWUWY56OG3QXXYHZA5CNFSM4JYBQ4D2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEGIEQHI#issuecomment-563103773, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AM4QYITRKVVMWFQZG6EK65TQXXYHZANCNFSM4JYBQ4DQ.

jiel168 commented 4 years ago

谢谢，已经找到原因 kube-controller-manager systemd unit 模板文件 需要修改下 --requestheader-allowed-names=front-proxy-client \

还有个问题：我是完全按照文档说明做的，为什么我会遇到这个问题呢？ 再次感谢