Open jiduofengyufan opened 6 years ago
NAME STATUS MESSAGE ERROR controller-manager Unhealthy Get http://127.0.0.1:10252/healthz: net/http: HTTP/1.x transport connection broken: malformed HTTP response "\x15\x03\x01\x00\x02\x02" scheduler Healthy ok etcd-2 Healthy {"health":"true"} etcd-1 Healthy {"health":"true"} etcd-0 Healthy {"health":"true"}
● kube-controller-manager.service - Kubernetes Controller Manager Loaded: loaded (/etc/systemd/system/kube-controller-manager.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2018-08-12 14:23:54 CST; 10min ago Docs: https://github.com/GoogleCloudPlatform/kubernetes Main PID: 14725 (kube-controller) CGroup: /system.slice/kube-controller-manager.service └─14725 /opt/k8s/bin/kube-controller-manager --port=0 --secure-port=10252 --bind-address=127.0.0.1 --master=https://10.128.226.119:8443 --kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig --service-cluster-ip-r...
Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937558 14725 flags.go:27] FLAG: --unhealthy-zone-threshold="0.55" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937563 14725 flags.go:27] FLAG: --use-service-account-credentials="true" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937567 14725 flags.go:27] FLAG: --v="2" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937571 14725 flags.go:27] FLAG: --version="false" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937577 14725 flags.go:27] FLAG: --vmodule="" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.940555 14725 controllermanager.go:116] Version: v1.10.6 Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: W0812 14:23:54.941271 14725 authentication.go:55] Authentication is disabled Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.941414 14725 serve.go:96] Serving securely on 127.0.0.1:10252 Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.942151 14725 leaderelection.go:175] attempting to acquire leader lease kube-system/kube-controller-manager... Aug 12 14:24:05 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:24:05.001289 14725 logs.go:49] http: TLS handshake error from 127.0.0.1:39100: tls: first record does not look like a TLS handshake
我也是同样的问题,是kube-controller-manager的配置文件里起了--secure-port=10252 安全认证的参数,跟apiserver认证的时候认证失败,我也没办法呢,你解决了么?
不用安全端口就可以了,换成http即可;
将kube-controller-manager服务配置文件中的前三个参数注释就可以了……
kubectl get cs
NAME STATUS MESSAGE ERROR controller-manager Unhealthy Get http://127.0.0.1:10252/healthz: net/http: HTTP/1.x transport connection broken: malformed HTTP response "\x15\x03\x01\x00\x02\x02"
scheduler Healthy ok
etcd-2 Healthy {"health":"true"}
etcd-1 Healthy {"health":"true"}
etcd-0 Healthy {"health":"true"}
systemctl status kube-controller-manager
● kube-controller-manager.service - Kubernetes Controller Manager Loaded: loaded (/etc/systemd/system/kube-controller-manager.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2018-08-12 14:23:54 CST; 10min ago Docs: https://github.com/GoogleCloudPlatform/kubernetes Main PID: 14725 (kube-controller) CGroup: /system.slice/kube-controller-manager.service └─14725 /opt/k8s/bin/kube-controller-manager --port=0 --secure-port=10252 --bind-address=127.0.0.1 --master=https://10.128.226.119:8443 --kubeconfig=/etc/kubernetes/kube-controller-manager.kubeconfig --service-cluster-ip-r...
Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937558 14725 flags.go:27] FLAG: --unhealthy-zone-threshold="0.55" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937563 14725 flags.go:27] FLAG: --use-service-account-credentials="true" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937567 14725 flags.go:27] FLAG: --v="2" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937571 14725 flags.go:27] FLAG: --version="false" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.937577 14725 flags.go:27] FLAG: --vmodule="" Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.940555 14725 controllermanager.go:116] Version: v1.10.6 Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: W0812 14:23:54.941271 14725 authentication.go:55] Authentication is disabled Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.941414 14725 serve.go:96] Serving securely on 127.0.0.1:10252 Aug 12 14:23:54 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:23:54.942151 14725 leaderelection.go:175] attempting to acquire leader lease kube-system/kube-controller-manager... Aug 12 14:24:05 tjtx148-15-47.58os.org kube-controller-manager[14725]: I0812 14:24:05.001289 14725 logs.go:49] http: TLS handshake error from 127.0.0.1:39100: tls: first record does not look like a TLS handshake