metrics安装异常原因【doesn‘t contain any IP SANs】

原创

已于 2024-01-11 16:28:38 修改 · 1.2k 阅读

5 ·

CC 4.0 BY-SA版权

文章标签：

#java #elasticsearch #开发语言

于 2024-01-10 18:35:06 首次发布

文章讲述了在安装并配置Kubernetesmetrics-server时遇到的pod启动问题，原因是证书验证失败。通过在kubelet启动参数中添加`--kubelet-insecure-tls`选项，解决了证书验证问题，确保了pod的正常启动和kubectl对节点/pod资源的访问

1、问题背景

安装好k8s后，安装metrics-server后发现对应的pod一直无法启动。

apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    k8s-app: metrics-server
  name: metrics-server
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    k8s-app: metrics-server
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-view: "true"
  name: system:aggregated-metrics-reader
rules:
- apiGroups:
  - metrics.k8s.io
  resources:
  - pods
  - nodes
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  labels:
    k8s-app: metrics-server
  name: system:metrics-server
rules:
- apiGroups:
  - ""
  resources:
  - nodes/metrics
  verbs:
  - get
- apiGroups:
  - ""
  resources:
  - pods
  - nodes
  verbs:
  - get
  - list
  - watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  labels:
    k8s-app: metrics-server
  name: metrics