CentOS7搭建etcd服务--错误排查（学习-笔录）

最新推荐文章于 2024-04-01 19:24:28 发布

原创

最新推荐文章于 2024-04-01 19:24:28 发布 · 1.2w 阅读

17 ·

CC 4.0 BY-SA版权

文章标签：

#centos #kubernetes #运维

本文记录在CentOS7上搭建etcd服务时的错误排查过程。介绍了etcd服务的主要配置文件etcd.conf和etcd.service及其参数，指出因拷贝的软件包未更新证书导致问题，更新证书后重启服务，最后查看了etcd服务集群状态。

CentOS7搭建etcd服务–错误排查（k8s学习-笔录）

今天在学习k8s集群搭建环境准备时，搭建etcd服务启动后一直显示start状态，使用systemctl status etcd.service -l 查看详细信息如下

1、错误信息

[root@hdss7-21 cfg]# systemctl status etcd.service -l
● etcd.service - Etcd Server
   Loaded: loaded (/etc/systemd/system/etcd.service; disabled; vendor preset: disabled)
   Active: activating (start) since 五 2020-12-25 15:53:26 CST; 49s ago
 Main PID: 4150 (etcd)
   Memory: 17.6M
   CGroup: /system.slice/etcd.service
           └─4150 /opt/etcd/bin/etcd --name=etcd-2 --data-dir=/var/lib/etcd/default.etcd --listen-peer-urls=https://192.168.6.21:2380 --listen-client-urls=https://192.168.6.21:2379,http://127.0.0.1:2379 --advertise-client-urls=https://192.168.6.21:2379,http://127.0.0.1:2379 --initial-advertise-peer-urls=https://192.168.6.21:2380 --initial-cluster=etcd-1=https://192.168.6.12:2380,etcd-2=https://192.168.6.21:2380,etcd-3=https://192.168.6.22:2380 --initial-cluster-token=etcd-cluster --initial-cluster-state=new --cert-file=/opt/etcd/ssl/server.pem --key-file=/opt/etcd/ssl/server-key.pem --peer-cert-file=/opt/etcd/ssl/server.pem --peer-key-file=/opt/etcd/ssl/server-key.pem --trusted-ca-file=/opt/etcd/ssl/ca.pem --peer-trusted-ca-file=/opt/etcd/ssl/ca.pem

12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.22:49034" (error "remote error: tls: bad certificate", ServerName "")
12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.12:55488" (error "remote error: tls: bad certificate", ServerName "")
12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.12:55492" (error "remote error: tls: bad certificate", ServerName "")
12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.22:49040" (error "remote error: tls: bad certificate", ServerName "")
12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.22:49038" (error "remote error: tls: bad certificate", ServerName "")
12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.12:55500" (error "remote error: tls: bad certificate", ServerName "")
12月 25 15:54:15 hdss7-21.host.com etcd[4150]: rejected connection from "192.168.6.12:55498" (error "remote error: tls: bad certificate", ServerName "")

2、我的etcd服务配置

目录结构

[root@hdss7-21 opt]# tree etcd/
etcd/
├── bin
│   ├── etcd
│   └── etcdctl
├── cfg
│   └── etcd.conf
├── etcd.service
├── ssl
│   ├── ca.pem
│   ├── etcd-peer-key.pem
│   └── etcd-peer.pem
└── ssl-bak
    ├── ca.pem
    ├── server-key.pem
    └── server.pem

最低0.47元/天解锁文章