为什么在k8s上启用服务拓扑时出错？

Question

我在k8s集群中启用了服务拓扑。我添加了以下代码行：

- --feature-gates=ServiceTopology=true,EndpointSlice=true

在以下文件中：

• / etc / kubernetes / manifests / kube-apiserver.yaml
• / etc / kubernetes / manifests / kube-controller-manager.yaml;
• / etc / kubernetes / manifests / kube-scheduler.yaml;

但是现在我的广告连播无法访问互联网和服务。你能帮我吗？

Answer 1

coredns窗格显示以下错误。窗格的状态为“ ContainerCreating”：

  Type     Reason                  Age                   From                    Message
  ----     ------                  ----                  ----                    -------
  Warning  FailedScheduling        16m (x2 over 16m)     default-scheduler       0/1 nodes are available: 1 node(s) had taints that the pod didn't tolerate.
  Normal   Scheduled               16m                   default-scheduler       Successfully assigned kube-system/coredns-6955765f44-p5jr2 to k8s-17-master
  Warning  FailedCreatePodSandBox  16m                   kubelet, k8s-17-master  Failed to create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "f43ac5bf62f2ee8efbe7e125a3905a5f242d17acedcaf84bcb80225a5ccf69ad" network for pod "coredns-6955765f44-p5jr2": networkPlugin cni failed to set up pod "coredns-6955765f44-p5jr2_kube-system" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes"), failed to clean up sandbox container "f43ac5bf62f2ee8efbe7e125a3905a5f242d17acedcaf84bcb80225a5ccf69ad" network for pod "coredns-6955765f44-p5jr2": networkPlugin cni failed to teardown pod "coredns-6955765f44-p5jr2_kube-system" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")]
  Normal   SandboxChanged          5m58s (x48 over 16m)  kubelet, k8s-17-master  Pod sandbox changed, it will be killed and re-created.
  Warning  FailedMount             51s                   kubelet, k8s-17-master  MountVolume.SetUp failed for volume "coredns-token-jjgq4" : failed to sync secret cache: timed out waiting for the condition
  Warning  FailedMount             51s                   kubelet, k8s-17-master  MountVolume.SetUp failed for volume "config-volume" : failed to sync configmap cache: timed out waiting for the condition
  Normal   SandboxChanged          7s (x2 over 49s)      kubelet, k8s-17-master  Pod sandbox changed, it will be killed and re-created.