zhuchuangang / k8s-install-scripts Goto Github PK

forbidden: User "system:anonymous" cannot get path "/"",

通过您的yaml创建的redis集群执行到最后一步，删除了临时主机点，但是不会产生新的主节点，请问这是怎么回事？

kubeadm init --apiserver-advertise-address=${MASTER_ADDRESS} --kubernetes-version=v${KUBE_VERSION} --token=${KUBE_TOKEN} --pod-network-cidr=10.244.0.0/12
会导致容器无法不匹配iptables的策略，无法snat而无法访问外网

这里的网段掩码有误应该是 --pod-network-cidr=10.244.0.0/16

I use kubeadm - master. Sh to create the master,How to configure dashboard tocken?tks

按照教程，先运行master，然后按照提示处理admin.conf，然后在另一台机器上运行node，在node机器上
[root@bigbangtest1st] /etc/kubernetes/manifests$ kubeadm join --token 863f67.19babbff7bfe8543 172.18.0.16:6443 --skip-preflight-checks
[kubeadm] WARNING: kubeadm is in beta, please do not use it for production clusters.
[preflight] Skipping pre-flight checks
[discovery] Trying to connect to API Server "172.18.0.16:6443"
[discovery] Created cluster-info discovery client, requesting info from "https://172.18.0.16:6443"
[discovery] Cluster info signature and contents are valid, will use API Server "https://172.18.0.16:6443"
[discovery] Successfully established connection with API Server "172.18.0.16:6443"
[bootstrap] Detected server version: v1.7.2
[bootstrap] The server supports the Certificates API (certificates.k8s.io/v1beta1)
[csr] Created API client to obtain unique certificate for this node, generating keys and certificate signing request
[csr] Received signed certificate from the API server, generating KubeConfig...
[kubeconfig] Wrote KubeConfig file to disk: "/etc/kubernetes/kubelet.conf"

Node join complete:

• Certificate signing request sent to master and response
  received.
• Kubelet informed of new secure connection details.

Run 'kubectl get nodes' on the master to see this machine join.

[root@k8s ~]# kubectl create -f kubedns-controller.yaml
error: error validating "kubedns-controller.yaml": error validating data: [found invalid field tolerations for v1.PodSpec, found invalid field optional for v1.ConfigMapVolumeSource]; if you choose to ignore these errors, turn validation off with --validate=false

failed to run Kubelet: Running with swap on is not supported, please disable swap! or set --fail-swap-on flag to false. /proc/swaps contained: [Filename#011#011#011#011Type#011#011Size#011Used#011Priority /dev/dm-1

这个要改哪个配制文件哟

根据教程部署，Etcd 成功了，但是使用kubectl get nodes报错，The connection to the server localhost:8080 was refused - did you specify the right host or port?
是否还需要添加kubectl的配置文件？

如果没有安装firewalld 脚本会报错，需要手动注释掉关于firewalld的内容；
如果没有安装estables，安装会终止，需要手动yum install estables；

可以使用别的容器来搭吗?
https://quay.io/repository/attcomdev/kube-controller-manager?tab=tags这个就可以支持rbd，但是我不会弄怎么替代原来的容器请指教

用node脚本安装的时候 报找不到这个配置文件，相应的文件加下也没有

对于最小安装的系统，没说明脚本需要依赖于什么命令
etcd.sh脚本中需要添加一行配置
yum install -y zip unzip wget
取消注释source ~/.bash_profile
需要注释掉 exec bash --login

[etcd] Wrote Static Pod manifest for a local etcd instance to "/etc/kubernetes/manifests/etcd.yaml"
[init] Waiting for the kubelet to boot up the control plane as Static Pods from directory "/etc/kubernetes/manifests".
[init] This might take a minute or longer if the control plane images have to be pulled.
然后很 久后 就失败了 提示的是 TLS handshake timeout

docker阿里镜像链接失效了。

Will download kubernetes-server-linux-amd64.tar.gz from https://storage.googleapis.com/kubernetes-release/release/v1.6.7

这个是下载不下来的！