Comments (6)
Documenting the detailed steps that I followed to make it work. This is a workaround untll the bash script issue is fixed.
- If you have already installed kubefledged and face the above issue, then remove the install
make remove-operator-and-kubefledged - Run the below command to get the CA_BUNDLE value
kubectl config view --raw --flatten -o json | jq -r '.clusters[]' | grep certificate - Replace {{ CA_BUNDLE }} in the file deploy/kubefledged-validatingwebhook.yaml withe value obtained from the above step
- Redeploy kubefledge
make deploy-using-yaml
from kube-fledged.
@k8s-junkie i have the same issue after just install it.
kubectl -n kube-fledged logs kubefledged-webhook-server-7477d7b8ff-8jdk5
I1226 16:25:39.745357 1 main.go:282] Wehook server listening on :443
2020/12/26 17:16:50 http: TLS handshake error from 10.246.0.135:54932: remote error: tls: bad certificate
2020/12/26 17:17:56 http: TLS handshake error from 10.246.0.135:55190: remote error: tls: bad certificate
2020/12/27 07:49:45 http: TLS handshake error from 10.246.0.135:35542: remote error: tls: bad certificate
from kube-fledged.
I deployed kube-fledged on my k8s cluster created using kubespray and tried to cache nginx image onto all of my worker nodes and I am getting the below error
kubectl create -f deploy/kubefledged-imagecache.yaml
Error from server (InternalError): error when creating "deploy/kubefledged-imagecache.yaml": Internal error occurred: failed calling webhook "validate-image-cache.kubefledged.k8s.io": Post https://kubefledged-webhook-server.kube-fledged.svc:3443/validate-image-cache?timeout=1s: x509: certificate signed by unknown authorityThis is what I see in the logs of webhook-server container
[centos@infra-vm kube-fledged]$ kubectl logs kubefledged-webhook-server-678d8f44d5-fk7kk -n kube-fledged
I1223 15:11:59.201779 1 main.go:282] Wehook server listening on :443
2020/12/23 16:56:49 http: TLS handshake error from 10.233.117.0:38036: remote error: tls: bad certificate
2020/12/23 17:04:49 http: TLS handshake error from 10.233.117.0:41302: remote error: tls: bad certificate
2020/12/23 17:04:59 http: TLS handshake error from 10.233.117.0:41368: remote error: tls: bad certificate
[centos@infra-vm kube-fledged]$Can anyone please help me out or provide me some pointers on how to resolve this error
The caBundle not passed to the yaml file because of the bash script, do it manually and it will work with you
from kube-fledged.
@husam17987 Sorry did not follow this. Can you please elaborate on what is that I should be doing manually for this to work ?
from kube-fledged.
@husam17987 Finally figured it out.
Looks like I had to remove the previous install and do a fresh install for the caBundle to take into effect.
from kube-fledged.
Thanks for posting this issue. I'll have the bash script fixed in v0.8.0. It has issues in identifying the cluster of the current-context, I'll fix it.
from kube-fledged.
Related Issues (20)
- Scale from zero node pool support? HOT 1
- Why not Daemon set? HOT 1
- TLS errors when updating kube-fledged helm chart HOT 4
- [question] Does it work with the in-cluster pull through cache? HOT 2
- Failing to pull image HOT 1
- Enhancement: Refactor controller syncHandler() method
- Feature: Fine grained node selection
- Feature: Awareness of available disk space
- Optimize the image download to node cache. HOT 1
- Auto cache when new node added to cluster HOT 4
- Release Date? HOT 3
- Feature: Ability to pass labels/annotations to job pods HOT 1
- Question: How to access images in cache?
- Configuration and Troubleshooting- Cache not being used HOT 1
- Question: ignore pulling to control-plane
- License.md not found
- Adding Contributors Section to the Readme.md HOT 2
- feature: hostNetwork for image pull jobs
- Enhancement: Enforce Minimum TLS Version HOT 2
- image cache failing-No images were pulled or deleted because nodeSelector specified did not match any nodes when trying without node selector
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kube-fledged.