error execution phase preflight: couldn't validate the identity of the API Server: Get https://1

Posted 2020-12-18 骇客黑界

kubernetes（k8s）DNS 服务反复重启解决：

k8s.io/dns/pkg/dns/dns.go:150: Failed to list *v1.Service: Get https://10.96.0.1:443/api/v1/services?resourceVersion=0: dial tcp 10.96.0.1:443: getsockopt: no route to host

在使用 Minikube 部署 kubernetes 服务时，出现 Kube DNS 服务反复重启现象（错误如上），

这很可能是 iptables 规则乱了，我通过执行以下命令解决了，在此记录：

1.回到kubernees-maser  依次输入列命令

systemctl stop kubelet
systemctl stop docker
iptables --flush
iptables -tnat --flush
systemctl start kubelet
systemctl start docker

  2.重新生成新token

  在kubernetse-master重新生成token：

# kubeadm token create

  424mp7.nkxx07p940mkl2nd

# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed ‘s/^.* //‘

  d88fb55cb1bd659023b11e61052b39bbfe99842b0636574a16c76df186fd5e0d

 

   3.在kubernetes-slave中执行此命令 join就成功了

#  kubeadm join 192.168.169.21:6443 –token 424mp7.nkxx07p940mkl2nd --discovery-token-ca-cert-hash sha256:d88fb55cb1bd659023b11e61052b39bbfe99842b0636574a16c76df186fd5e0d