起因?qū)嶒?yàn)環(huán)境的metrics-server狀態(tài)一直是0/1 Running
1. 報(bào)錯(cuò)信息
用kubectl logs -n kube-system metrics-server-67db5c9b4f-kmflf查看容器時(shí),出現(xiàn)以下報(bào)錯(cuò).
I0403 00:53:12.159359 1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
I0403 00:53:22.159679 1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
E0403 00:53:26.965752 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.51:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.51 because it doesn't contain any IP SANs" node="node-01"
E0403 00:53:26.983120 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.41:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.41 because it doesn't contain any IP SANs" node="master-01"
E0403 00:53:26.983215 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.52:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.52 because it doesn't contain any IP SANs" node="node-02"
I0403 00:53:32.159983 1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
E0403 00:53:41.967697 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.52:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.52 because it doesn't contain any IP SANs" node="node-02"
E0403 00:53:41.980183 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.41:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.41 because it doesn't contain any IP SANs" node="master-01"
E0403 00:53:41.982200 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.51:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.51 because it doesn't contain any IP SANs" node="node-01"
I0403 00:53:42.159965 1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
I0403 00:53:52.159198 1 server.go:187] "Failed probe" probe="metric-storage-ready" err="no metrics to serve"
E0403 00:53:56.959022 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.51:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.51 because it doesn't contain any IP SANs" node="node-01"
E0403 00:53:56.973551 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.41:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.41 because it doesn't contain any IP SANs" node="master-01"
E0403 00:53:56.983067 1 scraper.go:140] "Failed to scrape node" err="Get \"https://192.168.31.52:10250/metrics/resource\": x509: cannot validate certificate for 192.168.31.52 because it doesn't contain any IP SANs" node="node-02"
2. 報(bào)錯(cuò)原因
kubelet 的10250端口使用的是https協(xié)議,連接需要驗(yàn)證tls證書(shū).
3. 解決方法
Deployment的spec.template.spec.containers.args
大概140行左右文章來(lái)源:http://www.zghlxwxcb.cn/news/detail-621581.html
- --kubelet-insecure-tls
文章來(lái)源地址http://www.zghlxwxcb.cn/news/detail-621581.html
到了這里,關(guān)于“Failed to scrape node“ err=“Get \“https://:10250/metrics/resource\“: x509: cannot validate故障排除的文章就介紹完了。如果您還想了解更多內(nèi)容,請(qǐng)?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章,希望大家以后多多支持TOY模板網(wǎng)!