kubernetes-连接更新为1.16.6后被拒绝

Question

我已经将基于CentOS 7的Kubernetes集群的母版从1.15更新到了1.16.6。我关注了官方manual。

更新成功完成后，我重新启动了主服务器。从那时起，我收到每个kubectl命令的消息，提示该API不可用。 kubelet的系统信息也给我同样的信息。

$ kubectl get pods
The connection to the server 10.6.231.55:6443 was refused - did you specify the right host or port?
$
$
$ journalctl -u kubelet.service -f
-- Logs begin at Fri 2020-01-31 13:50:09 CET. --
Jan 31 16:52:40 orbisos010 kubelet[14818]: E0131 16:52:40.137787   14818 reflector.go:123] k8s.io/kubernetes/pkg/kubelet/kubelet.go:459: Failed to list *v1.Node: Get https://10.6.231.55:6443/api/v1/nodes?fieldSelector=metadata.name%3Dorbisos010&limit=500&resourceVersion=0: dial tcp 10.6.231.55:6443: connect: connection refused
Jan 31 16:52:41 orbisos010 kubelet[14818]: E0131 16:52:41.130807   14818 reflector.go:123] k8s.io/kubernetes/pkg/kubelet/kubelet.go:450: Failed to list *v1.Service: Get https://10.6.231.55:6443/api/v1/services?limit=500&resourceVersion=0: dial tcp 10.6.231.55:6443: connect: connection refused
Jan 31 16:52:41 orbisos010 kubelet[14818]: E0131 16:52:41.137195   14818 reflector.go:123] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:46: Failed to list *v1.Pod: Get https://10.6.231.55:6443/api/v1/pods?fieldSelector=spec.nodeName%3Dorbisos010&limit=500&resourceVersion=0: dial tcp 10.6.231.55:6443: connect: connection refused
Jan 31 16:52:41 orbisos010 kubelet[14818]: E0131 16:52:41.138917   14818 reflector.go:123] k8s.io/kubernetes/pkg/kubelet/kubelet.go:459: Failed to list *v1.Node: Get https://10.6.231.55:6443/api/v1/nodes?fieldSelector=metadata.name%3Dorbisos010&limit=500&resourceVersion=0: dial tcp 10.6.231.55:6443: connect: connection refused
Jan 31 16:52:42 orbisos010 kubelet[14818]: E0131 16:52:42.132181   14818 reflector.go:123] k8s.io/kubernetes/pkg/kubelet/kubelet.go:450: Failed to list *v1.Service: Get https://10.6.231.55:6443/api/v1/services?limit=500&resourceVersion=0: dial tcp 10.6.231.55:6443: connect: connection refused
Jan 31 16:52:42 orbisos010 kubelet[14818]: E0131 16:52:42.138261   14818 reflector.go:123] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:46: Failed to list *v1.Pod: Get https://10.6.231.55:6443/api/v1/pods?fieldSelector=spec.nodeName%3Dorbisos010&limit=500&resourceVersion=0: dial tcp 10.6.231.55:6443: connect: connection refused

我已经使用以下命令配置了主服务器：

$ kubeadm init \
  --apiserver-advertise-address=10.6.231.55 \
  --pod-network-cidr=10.244.0.0/16 \
  --service-cidr=10.96.0.0/12 \
  --service-dns-domain=k8s.example.local

另外，我在/etc/sysconfig/kubelet EXTRA_ARGS中进行设置，以将crio定义为容器运行时，将systemd定义为cgroups驱动程序。

KUBELET_EXTRA_ARGS=--container-runtime-endpoint=unix:///var/run/crio/crio.sock --cgroup-driver=systemd --runtime-cgroups=/systemd/system.slice --kubelet-cgroups=/systemd/system.slice

任何想法为何我无法连接到10.6.231.55:6443？ 1.16.6版中是否有重大更改？

Volker

Answer 1

此问题通常在启用交换后发生，请在您的节点上运行：swapoff -a。重新启动后，将启用节点交换，因此您只需再次运行此命令即可将其禁用。