标签：certificate 8236 04 16 x509 apiserver 报错 go kube
前提：k8s证书都是正常的没有过期，前段时间做过处理。 原因：替换了k8s证书后没有对kube-apiserver主键重启，还使用的是缓存信息，重启一下问题解决 systemctl restart kube-apiserver.service问题：kubectl create -f apply-server.yaml
Error from server: error when creating "ld-manage-ui-service.yaml": Get https://192.168.1.5:6443/api/v1/namespaces/chinapopin-system-test/resourcequotas: x509: certificate has expired or is not yet valid
查看apiserver日志报错，如下：
[root@master242 ld-manage-ui]# systemctl status kube-apiserver.service
● kube-apiserver.service - Kubernetes API Service
Loaded: loaded (/etc/systemd/system/kube-apiserver.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2021-06-03 09:38:55 CST; 1 years 0 months ago
Docs: https://github.com/GoogleCloudPlatform/kubernetes
Main PID: 8236 (kube-apiserver)
Tasks: 20
Memory: 551.3M
CGroup: /system.slice/kube-apiserver.service
└─8236 /usr/local/bin/kube-apiserver --logtostderr=true --v=0 --etcd-servers=https://192.168.1.5:2379,https://192.168.1.6:2379,https://192.168.1.7:2379 --advertise-address=192.168.1...
Jun 14 16:04:21 master242 kube-apiserver[8236]: E0614 16:04:21.006139 8236 available_controller.go:231] v1beta1.extensions failed with: Put https://192.168.1.5:6443/apis/apiregistration...not yet valid
Jun 14 16:04:21 master242 kube-apiserver[8236]: I0614 16:04:21.006162 8236 logs.go:41] http: TLS handshake error from 192.168.1.5:54168: remote error: tls: bad certificate
Jun 14 16:04:21 master242 kube-apiserver[8236]: I0614 16:04:21.944058 8236 logs.go:41] http: TLS handshake error from 192.168.1.5:54180: remote error: tls: bad certificate
Jun 14 16:04:21 master242 kube-apiserver[8236]: E0614 16:04:21.944099 8236 reflector.go:201] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:72: Failed to list *ex...
Jun 14 16:04:22 master242 kube-apiserver[8236]: I0614 16:04:22.949660 8236 logs.go:41] http: TLS handshake error from 192.168.1.5:54192: remote error: tls: bad certificate
Jun 14 16:04:22 master242 kube-apiserver[8236]: E0614 16:04:22.949696 8236 reflector.go:201] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:72: Failed to list *ex...
Jun 14 16:04:23 master242 kube-apiserver[8236]: I0614 16:04:23.955399 8236 logs.go:41] http: TLS handshake error from 192.168.1.5:54240: remote error: tls: bad certificate
Jun 14 16:04:23 master242 kube-apiserver[8236]: E0614 16:04:23.955470 8236 reflector.go:201] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:72: Failed to list *ex...
Jun 14 16:04:24 master242 kube-apiserver[8236]: I0614 16:04:24.960801 8236 logs.go:41] http: TLS handshake error from 192.168.1.5:54254: remote error: tls: bad certificate
Jun 14 16:04:24 master242 kube-apiserver[8236]: E0614 16:04:24.960856 8236 reflector.go:201] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:72: Failed to list *ex...
标签：certificate,8236,04,16,x509,apiserver,报错,go,kube 来源： https://www.cnblogs.com/wukc/p/16375166.html
本站声明： 1. iCode9 技术分享网（下文简称本站）提供的所有内容，仅供技术学习、探讨和分享； 2. 关于本站的所有留言、评论、转载及引用，纯属内容发起人的个人观点，与本站观点和立场无关； 3. 关于本站的所有言论和文字，纯属内容发起人的个人观点，与本站观点和立场无关； 4. 本站文章均是网友提供，不完全保证技术分享内容的完整性、准确性、时效性、风险性和版权归属；如您发现该文章侵犯了您的权益，可联系我们第一时间进行删除； 5. 本站为非盈利性的个人网站，所有内容不会用来进行牟利，也不会利用任何形式的广告来间接获益，纯粹是为了广大技术爱好者提供技术内容和技术思想的分享性交流网站。