kubernetes notes

最新推荐文章于 2025-09-11 20:53:34 发布

weixin_34092370

最新推荐文章于 2025-09-11 20:53:34 发布

阅读量93

点赞数

CC 4.0 BY-SA版权

文章标签：数据库运维

原文链接：https://my.oschina.net/kut/blog/2877743

本文详细介绍了在Kubernetes中创建mysql.yaml文件时遇到的权限问题及解决方案。当使用kubectl命令创建Pod时，若出现与ServiceAccount相关的API token未找到错误，文章提供了具体的步骤来编辑apiserver配置，移除SecurityContextDeny和服务账号限制，重启服务并解决pod创建问题。

为什么80%的码农都做不了架构师？>>>

Error from server (ServerTimeout): error when creating "mysql.yaml": No API token found for service account "default", retry after the token is automatically created and added to the service account

# kubectl  create -f mysql.yaml
此时有如下报错：

Error from server (ServerTimeout): error when creating "mysql.yaml": No API token found for service account "default", retry after the token is automatically created and added to the service account
解决办法是编辑/etc/kubernetes/apiserver 去除 KUBE_ADMISSION_CONTROL中的SecurityContextDeny,ServiceAccount，并重启kube-apiserver.service服务：

#vim /etc/kubernetes/apiserver
KUBE_ADMISSION_CONTROL="--admission_control=NamespaceLifecycle,NamespaceExists,LimitRanger,ResourceQuota"

#systemctl restart kube-apiserver.service
之后重新创建pod:

# kubectl create -f mysql.yaml
pod "mysql" created

details: (open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory)

root 运行

wget http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm

rpm2cpio python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem

转载于:https://my.oschina.net/kut/blog/2877743