首页 > 其他分享 >执行kubeadm 出现 FATAL: the ConfigMap "kubeadm-config" in the kube-system namespace used for g

执行kubeadm 出现 FATAL: the ConfigMap "kubeadm-config" in the kube-system namespace used for g

时间:2023-08-16 09:47:19浏览次数:37  
标签:ConfigMap upgrade CN was system conf kubeadm config

现象: 

[upgrade/config] Making sure the configuration is correct:
[upgrade/config] Reading configuration from the cluster...
[upgrade/config] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'
[upgrade/config] In order to upgrade, a ConfigMap called "kubeadm-config" in the kube-system namespace must exist.
[upgrade/config] Without this information, 'kubeadm upgrade' won't know how to configure your upgraded cluster.

[upgrade/config] Next steps:
- OPTION 1: Run 'kubeadm config upload from-flags' and specify the same CLI arguments you passed to 'kubeadm init' when you created your control-plane.
- OPTION 2: Run 'kubeadm config upload from-file' and specify the same config file you passed to 'kubeadm init' when you created your control-plane.
- OPTION 3: Pass a config file to 'kubeadm upgrade' using the --config flag.

[upgrade/config] FATAL: the ConfigMap "kubeadm-config" in the kube-system namespace used for getting configuration information was not found

1、原因:

是由于kubelet.conf配置不正常造成的(证书的CN/O内容错误),我复查了该文件,虽然users 是 name: system:node:k8s-m,但将client-certificate-data证书内容打印出来,CN/O的内容是(Subject: O = system:masters, CN = kubernetes-admin)

执行,把client-certificate-data证书内容打印出来

echo -n "YOUR—client-certificate-data" | base64 --decode | openssl x509 -text

admin.conf CN/O的内容是:Subject: O=system:masters, CN=kubernetes-admin

 kubelet.conf CN/O的内容是:Subject: CN=kubernetes

2、解决方案:

这表示证书和kubelet.conf配置用户不一致。我回想了一下,应该是上次kubelet不能启动,更新证书时无意间将admin.conf的证书内容复制了过来,因为admin.conf的配置显示用户正是(name: kubernetes-admin),既然知道问题所在解决起来就比较简单了,删除/etc/kubernetes/kubelet.conf,再通过以下命令重新生成新文件,注意指令参数中的kubeadm-config.yaml可参照文章开头的方法导出(只要ClusterConfiguration部分)

kubeadm init phase kubeconfig kubelet --config=kubeadm-config.yaml

标签:ConfigMap,upgrade,CN,was,system,conf,kubeadm,config
From: https://www.cnblogs.com/zbhlinux/p/17633073.html

相关文章

  • Jenkinsfile使用k8s agent构建失败:Container jnlp was terminated (Exit Code: 1, Rea
    问题描述Jenkinsfile使用k8sagent构建失败jenkins报错截图:查看pod app-system-23-wmx8b-5lnl2-lxvlr的jnlp容器日志:分析处理一般构建失败大都是jnlp容器问题。经以下日志分析发现jenkins主节点和slave节点的jdk版本不一致导致该提示JavaJDK版本不对:hudson/slaves/SlaveComputer......
  • K8S 1.27.1版本初始化配置文件时报your configuration file uses an old API spec: "k
    现象:yourconfigurationfileusesanoldAPIspec:"kubeadm.k8s.io/v1beta2".Pleaseusekubeadmv1.22insteadandrun'kubeadmconfigmigrate--old-configold.yaml--new-confignew.yaml',whichwillwritethenew,similarspecusingan......
  • kubeadm 更新ca、front-proxy-ca 根证书到100年(基于现有的K8S环境)
    背景:在现有K8S环境中默认情况下编译新kubeadm只能更新组件证书的时间,至于ca,front-proxy-ca集群根证书是无法更新的#更新集群ca、front-proxy-ca根证书1、备份master节点的ca、front-proxy-ca根证书cp-a/etc/kubernetes/pki/ca.crt/etc/kubernetes/pki/ca.crt.oldcp-a......
  • k8s 学习笔记之配置存储——ConfigMap&Secret
    配置存储ConfigMapConfigMap是一种比较特殊的存储卷,它的主要作用是用来存储配置信息的。创建configmap.yaml,内容如下:apiVersion:v1kind:ConfigMapmetadata:name:configmapnamespace:devdata:info:|(这个|后面整个都是值)username:adminpassword:12......
  • OWASP-Top-10-for-LLMs-2023
    一、LLM01:PromptInjection0x1:攻击原理这通过特殊构造的输入来污染/覆盖prompt提示,以此攻击一个大型语言模型(LLM),使其产生非预期的意外行为。提示注入漏洞(PromptInjectionVulnerability)是指攻击者通过精心构造的输入,操控一个大型语言模型(LLM),使得LLM在不知情的情况下执行攻......
  • 使用kubeadm快速部署一个k8s集群
    1.部署Kubernetes集群方式(1)kubeadmKubeadm是一个K8s部署工具,提供kubeadminit和kubeadmjoin,用于快速部署Kubernetes集群。官方地址:https://kubernetes.io/zh-cn/docs/reference/setup-tools/kubeadm/(2)二进制包从github下载发行版的二进制包,手动部署每个组件,组成Kube......
  • error: ‘strdup’ was not declared in this scope; did you mean ‘StrDup’ fileno
     {https://news.68idc.cn/buildlang/20150627387345.html}{函数名:strdup;功能:将串拷贝到新建的位置处;用法:char*strdup(char*str);strdup属于GNUC++的函数,不是标准(std)C++的函数,需要修改参数:把-std=c++11修改为-std=gnu++0x,即可.}函数名:strdup;功......
  • 【THM】OWASP 前10名—2021
    参考链接:https://www.cnblogs.com/Hekeats-L/p/16964401.html介绍该房间对每个OWASP主题进行了详细分析,并包含有关漏洞、它们如何发生以及如何利用它们的详细信息。您将通过完成支持性挑战将理论付诸实践。访问控制损坏加密失败注射不安全的设计安全配置错误易受攻击......
  • kubeadm集群添加新节点
    1.生成添加node节点tokenkubeadmtokencreate--print-join-command结果示例kubeadmjoin10.10.10.10:6443--tokenxxxxxx.xxx...xxx--discovery-token-ca-cert-hashsha256:xxxxx...xxxxb2.在master上生成用于新master加入的证书获取Usingcertificatekeykubeadmini......
  • 8.应用配置:特殊卷ConfigMap和Secret
    特殊卷ConfigMap和Secret是Kubernetes系统上两种特殊类型的存储卷◼ConfigMap用于为容器中的应用提供配置数据以定制程序的行为,而敏感的配置信息,例如密钥、证书等则通常由Secret来配置◼ConfigMap和Secret将相应的配置信息保存于资源对象中,而后在Pod对象上支持以存储......