1. kubeadm join 报错
错误信息：
error execution phase preflight: couldn't validate the identity of the API Server: abort connecting to API servers after timeout of 5m0s
错误原因：token 过期导致
解决办法： 主节点创建新 token
1 [root@k8s-master ~]# kubeadm token create //重新生成 token
2 xapc7r.w9y47e7vpvdbanzy
3 [root@k8s-master ~]# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'
4 e717a1a7f6184f186c2999457e2d4eff1b5f66c5c3a4a2a770d5fab9be4f9769
5 [root@localhost ~]# kubeadm join 192.168.243.134:6443 --token xapc7r.w9y47e7vpvdbanzy \ //重新 nodeJoin
6 > --discovery-token-ca-cert-hash sha256:e717a1a7f6184f186c2999457e2d4eff1b5f66c5c3a4a2a770d5fab9be4f9769
7 [preflight] Running pre-flight checks
8 [preflight] Reading configuration from the cluster...
9 [preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
10 [kubelet-start] Downloading configuration for the kubelet from the "kubelet-config-1.15" ConfigMap in the kube-system namespace
11 [kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
12 [kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env"
13 [kubelet-start] Activating the kubelet service
14 [kubelet-start] Waiting for the kubelet to perform the TLS Bootstrap...
15
16 This node has joined the cluster:
17 * Certificate signing request was sent to apiserver and a response was received.
18 * The Kubelet was informed of the new secure connection details.
19
20 Run 'kubectl get nodes' on the control-plane to see this node join the cluster.
21
22 [root@localhost ~]#
