error: failed to run Kubelet: cannot create certificate signing request
问题error: failed to run Kubelet: cannot create certificate signing request: certificatesigningrequests.certificates.k8s.io is forbidden: User "kubelet-bootstrap" cannot create certificatesigningrequest
·
问题
error: failed to run Kubelet: cannot create certificate signing request: certificatesigningrequests.certificates.k8s.io is forbidden: User "kubelet-bootstrap" cannot create certificatesigningrequests.certificates.k8s.io at the cluster scope
原因
kubelet-bootstrap并没有权限创建证书。所以要创建这个用户的权限并绑定到这个角色上。
解决方法
#在master上执行
kubectl create clusterrolebinding kubelet-bootstrap --clusterrole=system:node-bootstrapper --user=kubelet-bootstrap
#删除命令是
kubectl delete clusterrolebinding kubelet-bootstrap
#也可能是你配置文件有问题,比如IP,比如序列号等等,排查一下
更多推荐
已为社区贡献1条内容
所有评论(0)