x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error“

执行下面命令初始化k8s集群时

kubeadm init --pod-network-cidr 10.21.0.0/16 \--image-repository registry.cn-hangzhou.aliyuncs.com/google_containers

通过 kubectl get pods -n kube-system 查看pods状态

发现coredns对应的pod状态为ContainerCreating，

通过kubectl describe pods -n kube-system coredns-6c76c8bb89-9br5d 查看对应pod状态有下面错误信息：

reate pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "5ac64afb8a4f7c98aeeb5f459a80410cb9b180ad92322adc0bfe0b9ce1c81107" network for pod "coredns-6c76c8bb89-jlzgn": networkPlugin cni failed to set up pod "coredns-6c76c8bb89-jlzgn_kube-system" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes"), failed to clean up sandbox container "5ac64afb8a4f7c98aeeb5f459a80410cb9b180ad92322adc0bfe0b9ce1c81107" network for pod "coredns-6c76c8bb89-jlzgn": networkPlugin cni failed to teardown pod "coredns-6c76c8bb89-jlzgn_kube-system" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")]

网上搜索一圈无效后又研究了下kubeadm reset命令执行后的输出结果：

The reset process does not clean CNI configuration. To do so, you must remove /etc/cni/net.d

The reset process does not reset or clean up iptables rules or IPVS tables.
If you wish to reset iptables, you must do so manually by using the "iptables" command.

If your cluster was setup to utilize IPVS, run ipvsadm --clear (or similar)
to reset your system's IPVS tables.

The reset process does not clean your kubeconfig files and you must remove them manually.
Please, check the contents of the $HOME/.kube/config file.

然后根据上面的提示把/etc/cni/net.d目录删掉，然后重新执行kubeadm init命令就可以了。

x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error“相关推荐

k8s系列之：Unable to connect to the server: x509: certificate signed by unknown authority
k8s系列之:Unable to connect to the server: x509: certificate signed by unknown authority K8s使用kubeadm r ...
kubectl get node运行时出现：Unable to connect to the server: x509: certificate signed by unknown authority
kubectl get nodes运行时出现:Unable to connect to the server: x509: certificate signed by unknown authorit ...
docker-compose部署的服务访问https报错：x509: certificate signed by unknown authority
最近写了几个推特API的接口,在本机(mac)测试的时候好好的部署到服务器上的时候发现不能用了报错: {"code": 500,"msg": "e ...
Harbor docker login x509 certificate signed by unknown authority
文章目录 Harbor docker login x509 certificate signed by unknown authority 前言生成的证书方法一方法二方法三参考文档 Harb ...
使用golang发送邮件，报错“x509: certificate signed by unknown authority”
问题描述使用golang发送邮件,报错"x509: certificate signed by unknown authority",这是由于客户端默认要对服务端传过来的数字证书 ...
x509: certificate signed by unknown authority (harbor)
最近在做Docker相关的东西,发现只要一pull镜像,就出现如下的ERROR x509: certificate signed by unknown authority. 调查后发现,是公司IT把h ...
Docker在windows环境使用阿里云镜像 pull 报错 x509: certificate signed by unknown authority
本人使用的环境是 windows7 ,使用docker toolbox安装, 使用的是阿里云镜像,使用阿里云镜像相关操作阿里云上有操作步骤 https://cr.console.aliyun.com/ ...
gomail发送邮件报:x509: certificate signed by unknown authority的解决方法
今天在项目上遇到一个问题,项目上使用gomail库进行邮件的发送,在自己电脑上测试是可以正常发送邮件的,但是要上线的前一天,进行了上线部署测试,结果发送邮件的功能一直报错,通过谷歌找到了解决方法. 报 ...
docker登录私库时提示 x509: certificate signed by unknown authority
docker登录私库时提示 x509: certificate signed by unknown authority 编辑daemon.json vim /etc/docker/daemon.jso ...

x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error“

x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error“相关推荐

最新文章

热门文章