k8s常见报错解决--持续更新

Bertha 。 2021-12-18 20:53 3614阅读 0赞

# k8s 常见报错处理 #

*  \[WARNING IsDockerSystemdCheck\]: detected “cgroupfs” as the Docker cgroup driver. The recommended driver is “systemd”. Please follow the guide at [https://kubernetes.io/docs/setup/cri/][https_kubernetes.io_docs_setup_cri]  
    error execution phase preflight: \[preflight\] Some fatal errors occurred:

cat > /etc/docker/daemon.json <<EOF
    {
      "exec-opts": ["native.cgroupdriver=systemd"],
      "log-driver": "json-file",
      "log-opts": {
        "max-size": "100m"
      },
      "storage-driver": "overlay2",
      "storage-opts": [
        "overlay2.override_kernel_check=true"
      ]
    }
    EOF
    
    mkdir -p /etc/systemd/system/docker.service.d
    
    # Restart Docker
    systemctl daemon-reload
    systemctl restart docker

*  \[ERROR FileContent–proc-sys-net-ipv4-ip\_forward\]: /proc/sys/net/ipv4/ip\_forward contents are not set to 1

echo “1” > /proc/sys/net/ipv4/ip\_forward

*  \[ERROR DirAvailable–var-lib-etcd\]: /var/lib/etcd is not empty

rm -rf /var/lib/etcd

*  failed to load Kubelet config file /var/lib/kubelet/config.yaml
 *  unable to load client CA file /etc/kubernetes/pki/ca.crt
 *  failed to run Kubelet: unable to load bootstrap kubeconfig: stat /etc/kubernetes/bootstrap-kubelet.conf: no such file or directory

背景：node 节点 kubeadm reset 后 重新kubeadm join失败

*  Failed to execute iptables-restore: exit status 1（invalid option – ‘5’）
    
    解决：降低iptables版本，当前iptables-1.4.21-28.el7.x86\_64，回滚为iptables-1.4.21-24.el7.x86\_64 （centos7.5）
 *  Error from server (Forbidden): secrets is forbidden: User “system:node:master” cannot create resource “secrets” in API group “” in the namespace “kube-system”: can only read resources of this type

export KUBECONFIG=/etc/kubernetes/admin.conf

*  Error from server (AlreadyExists): secrets “kubernetes-dashboard-certs” already exists

kubectl delete -f kubernetes-dashboard.yaml 重新apply

*  The Service “kubernetes-dashboard” is invalid: spec.ports\[0\].nodePort: Forbidden: may not be used when `type` is ‘ClusterIP’

kubectl -n kube-system describe $(kubectl -n kube-system get secret -n kube-system -o name | grep namespace) | grep token

更改ClusterIP 为NodePort

[https_kubernetes.io_docs_setup_cri]: https://kubernetes.io/docs/setup/cri/