search

kelseyhightower / kubernetes-the-hard-way

Bootstrap Kubernetes the hard way. No scripts.
Apache License 2.0
41.26k stars 14.12k forks source link

kube-apiserver does not start #629

Closed elnemesisdivina closed 3 years ago

elnemesisdivina commented 3 years ago

running journalctl I got this Error on kube-apiserver whe does not start:

controller-0 kube-apiserver[21448]: Error: error while parsing encryption provider configuration file"/var/lib/kubernetes/encryption-config.yaml": error while parsing file: resources[0].providers[0].aescbc.keys[0].secret: Invalid value: "REDACTED": secrets must be base64 encoded

elnemesisdivina commented 3 years ago

running journalctl I got this Error on kube-apiserver whe does not start:

controller-0 kube-apiserver[21448]: Error: error while parsing encryption provider configuration file"/var/lib/kubernetes/encryption-config.yaml": error while parsing file: resources[0].providers[0].aescbc.keys[0].secret: Invalid value: "REDACTED": secrets must be base64 encoded

nevermind my bad at exporting ENCRYPTION_KEY to encryption-config.yaml, I adopted fish as my shell and many things are different or not have a binding yet so the fault was in the ${VARIABLE} in bash this is ok but in fish should be something like {$VARIABLE}, so I tested by creating the encryption key and enter it manually and it works so I change for the iteration for the other 2 controllers.