是 /var/lib/kubelet/pki 中的 kubelet-client-current.pem 证书不对，通过下面的命令重新生成 kubelet...
(sum without(instance, node) (kubelet_volume_stats_capacity_bytes{cluster="", job="kubelet", namespace="", persistentvolumeclaim=""}) sum without(instance, node) (kubelet_volume_stats_available_bytes{cluster="", job="kubelet", namespace="",persistentvolumeclaim=""})) 查看ServiceMonitor 资源...
This node has joined the cluster: * Certificate signing request was sent to apiserver and a response was received. * The Kubelet was informed of the new secure connection details. Run'kubectl get nodes'on the control-plane to see this nodejointhe cluster. [root@k8s-node2 ~]#...
unable to recognize "node-exporter-serviceMonitor.yaml": no matches for kind "ServiceMonitor" in version "monitoring.coreos.com/v1"unable to recognize "prometheus-prometheus.yaml": no matches for kind "Prometheus" in version "monitoring.coreos.com/v1"unable to recognize "prometheus-rules.yaml":...
kubernetes apiserver 根据事先定义的授权策略 来决定用户是否有权限访问。每个请求都带上了用户和资源的信息:比如发送请求的用户、请求的路径、请求的动作等,授权就是根据这些信息和授权策略进行比较,如果符合策略,则认为授权通过,否则会返回 403 Unauthorized 错误。
node_exporter.crt node_exporter.key 通过上面的步骤,我们得到了node_exporter.crt和node_exporter.key这两个文件。 Node Exporter 使用 TLS 下载v1.0.0 版本的 Node Exporter, 并对其进行解压等操作 (MoeLove) ➜ /tmp tar -zxvf node_exporter-1.0.0.linux-amd64.tar.gz ...
因为master和node1、node2节点的主机名都是localhost,修改节点主机名 1. 2. 10、kubelet重启有问题,如下图: 直接systemctl restart kubelet重启的话,会报错,如下图: 根据上图报错提示,可以看到需要先systemctl daemon-reload重新加载配置文件,再次systemctl restart kubelet重启,启动成功 ...
删一个带有副本控制集的 pod,验证是否会重启 pod kubectl delete pod -n monitor node-exporter-jlxxl 关闭下线节点其他 k8s master 组件 要记得把开机自启也关闭了 systemctl disable kube-controller-manager kube-scheduler --now 到此,关于 master 节点缩容的实践就结束了...
kubeuser@kube-worker-1:~$ curl http://kube-worker-1:30020 Hello! But when I access from master node or other worker nodes it doesn't connect. kubeuser@k8s-master:~$ curl http://k8s-master:30020 curl: (7) Failed to connect to k8s-master port 30020: Connection refused ...
Calico-node pod should be somehow check weather API server tokens is rotated, if yes, calico should request token immediately . Steps to Reproduce (for bugs) Times shift on both control plane and worker nodes and rotate the certificates of API server. ...