云原生 | k8s的mster-1,一直显示NotReady_failed while requesting a signed certificate from

 一、mster节点一直显示NotReady 查看kubelet一直报错。

journalctl -u kubelet.service  -f

 以下错误

1.unable to load bootstrap kubeconfig: stat /etc/kubernetes/bootstrap-kubelet.conf: no such file or directory

bootstrap-kubelet.conf是k8s API的引导令牌(Bootstrap Tokens)认证相关的文件。该机制会根据证书生成token，然后将信息写在这个文件里边。

2.Failed while requesting a signed certificate from the master: cannot create certificate signing request

意思：请求签名证书时失败：无法创建证书签名请求

二、解决方法：

1.备份并重新生成证书

# cd /etc/kubernetes/pki/
# mkdir backup
# mv  apiserver.crt apiserver-etcd-client.key apiserver-kubelet-client.crt front-proxy-ca.crt front-proxy-client.crt front-proxy-client.key front-proxy-ca.key apiserver-kubelet-client.key apiserver.key apiserver-etcd-client.crt backup
# kubeadm init phase certs all

2.备份并重新生成配置文件

# cd /etc/kubernetes/
# mkdir backup
# mv admin.conf controller-manager.conf kubelet.conf,scheduler.conf  backup
# kubeadm init phase kubeconfig all

3.拷贝用户权限文件（一般不用）

# cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

4.查看集群节点状态