kube-dns and kubernetes-dashboard pods status are CrashLoopBackOff -
i setup multi-node kubernetes cluster (3 etcds, 2 masters , 2 nodes) in openstack following https://coreos.com/kubernetes/docs/latest/getting-started.html
all vm has coreos 1185.3.0
kubectl version client version: version.info{major:"1", minor:"3", gitversion:"v1.4.3", gitcommit:"ae4550cc9c89a593bcda6678df201db1b208133b", gittreestate:"clean", builddate:"2016-08-26t18:13:23z", goversion:"go1.6.2", compiler:"gc", platform:"linux/amd64"} server version: version.info{major:"1", minor:"4", gitversion:"v1.4.0+coreos.0", gitcommit:"278a1f7034bdba61cba443722647da1a8204a6fc", gittreestate:"clean", builddate:"2016-09-26t20:48:37z", goversion:"go1.6.3", compiler:"gc", platform:"linux/amd64"} kubectl nodes return cluster healthy
name status age 172.29.0.157 ready,schedulingdisabled 1d 172.29.0.158 ready,schedulingdisabled 1d 172.24.0.120 ready 1d 172.24.0.121 ready 1d kubectl pods --namespace=kube-system return kube-dns , kubernetes-dashboard pods status crashloopbackoff
name ready status restarts age heapster-v1.2.0-3646253287-xweg5 2/2 running 0 2h kube-apiserver-172.29.0.157 1/1 running 2 1d kube-apiserver-172.29.0.158 1/1 running 1 1d kube-controller-manager-172.29.0.157 1/1 running 2 1d kube-controller-manager-172.29.0.158 1/1 running 1 1d kube-dns-v19-h7qyh 2/3 crashloopbackoff 13 2h kube-proxy-172.24.0.120 1/1 running 2 36m kube-proxy-172.24.0.121 1/1 running 2 37m kube-proxy-172.29.0.157 1/1 running 2 1d kube-proxy-172.29.0.158 1/1 running 1 1d kube-scheduler-172.29.0.157 1/1 running 2 1d kube-scheduler-172.29.0.158 1/1 running 1 1d kubernetes-dashboard-v1.4.0-t2lpu 0/1 crashloopbackoff 12 2h can tell me know how figure out exact issue here?
update:
i able logs of kube-dns , kubernetes-dashboard containers. seems certificate issue when trying call kubernetes api. have recreated certificate , replace them.
setting master , worker instructions, https://coreos.com/kubernetes/docs/latest/deploy-master.html https://coreos.com/kubernetes/docs/latest/deploy-workers.html
masters fronted load balancer.
finally restarted kubernetes 2 master vms , 2 node vms. problem still persists in kube-dns , kubernetes-dashboard.
kube-dns container logs
docker logs c8c82e68cde9 i1111 16:28:25.097452 1 server.go:94] using https://10.3.0.1:443 kubernetes master, kubernetes api: <nil> i1111 16:28:25.103598 1 server.go:99] v1.4.0-alpha.2.1652+c69e3d32a29cfa-dirty i1111 16:28:25.103789 1 server.go:101] flag: --alsologtostderr="false" i1111 16:28:25.103928 1 server.go:101] flag: --dns-port="10053" i1111 16:28:25.104185 1 server.go:101] flag: --domain="cluster.local." i1111 16:28:25.104301 1 server.go:101] flag: --federations="" i1111 16:28:25.104465 1 server.go:101] flag: --healthz-port="8081" i1111 16:28:25.104607 1 server.go:101] flag: --kube-master-url="" i1111 16:28:25.104718 1 server.go:101] flag: --kubecfg-file="" i1111 16:28:25.104831 1 server.go:101] flag: --log-backtrace-at=":0" i1111 16:28:25.104945 1 server.go:101] flag: --log-dir="" i1111 16:28:25.105056 1 server.go:101] flag: --log-flush-frequency="5s" i1111 16:28:25.105188 1 server.go:101] flag: --logtostderr="true" i1111 16:28:25.105302 1 server.go:101] flag: --stderrthreshold="2" i1111 16:28:25.105412 1 server.go:101] flag: --v="0" i1111 16:28:25.105520 1 server.go:101] flag: --version="false" i1111 16:28:25.105632 1 server.go:101] flag: --vmodule="" i1111 16:28:25.105853 1 server.go:138] starting skydns server. listening on port:10053 i1111 16:28:25.106185 1 server.go:145] skydns: metrics enabled on : /metrics: i1111 16:28:25.106367 1 dns.go:167] waiting service: default/kubernetes i1111 16:28:25.108281 1 logs.go:41] skydns: ready queries on cluster.local. tcp://0.0.0.0:10053 [rcache 0] i1111 16:28:25.108469 1 logs.go:41] skydns: ready queries on cluster.local. udp://0.0.0.0:10053 [rcache 0] e1111 16:28:25.176270 1 reflector.go:214] pkg/dns/dns.go:155: failed list *api.endpoints: server has asked client provide credentials (get endpoints) i1111 16:28:25.176774 1 dns.go:173] ignoring error while waiting service default/kubernetes: server has asked client provide credentials (get services kubernetes). sleeping 1s before retrying. kubernetes-dashboard container logs
docker logs b1d3b0fa617a starting http server on port 9090 creating api server client https://10.3.0.1:443 error while initializing connection kubernetes apiserver. means cluster misconfigured (e.g., has invalid apiserver certificates or service accounts configuration) or --apiserver-host param points server not exist. reason: server has asked client provide credentials kubernetes node logs
journalctl -u kubelet -f failed list *api.node: https://{load_balancer_ip}/api/v1/nodes?fieldselector=metadata.name%3d172.24.0.121&resourceversion=0: x509: certificate signed unknown authority (possibly because of "crypto/rsa: verification error" while trying verify candidate authority certificate "kube-ca") i followed https://coreos.com/kubernetes/docs/latest/openssl.html when generating certs.
api server certs generated below openssl config
[req] req_extensions = v3_req distinguished_name = req_distinguished_name [req_distinguished_name] [ v3_req ] basicconstraints = ca:false keyusage = nonrepudiation, digitalsignature, keyencipherment subjectaltname = @alt_names [alt_names] dns.1 = kubernetes dns.2 = kubernetes.default dns.3 = kubernetes.default.svc dns.4 = kubernetes.default.svc.cluster.local ip.1 = ${k8s_service_ip} ip.2 = ${load_balancer_ip} am missing here ?
thanks
Comments
Post a Comment