kubectl get nodes -o wide
发现有node节点notReady,然后登录node节点
journalctl -u kubelet 查看日志
kubelet: E0312 10:43:54.426114 11278 controller.go:144] failed to ensure lease exists, will retry in 7s, error: leases.coordination.k8s.io "nginx" is forbidden: User "system:anonymous" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease"
发现node 节点证书问题不能和master 节点通信,需要重新配置kubeconfig文件
在master节点执行命令,生成可以正常通信的kubeconfig文件。命令如下
kubeadm init phase kubeconfig kubelet --node-name $nodename --kubeconfig-dir /tmp --apiserver-advertise-address $msterip
scp /tmp/kubectl nodeip@root:/tmp
node 节点执行
然后替换原来的kubelet.conf 文件
systemctl start kubelet
ps -ef|grep kube
master 执行 kubectl get nodes -o wide
kubectl get pods -o wide 发现pod 已经Running