4.3 使用kubespray部署

来源：4-3 用kubespray一键部署生产级k8s集群

泰瑞亚小泰蜜

2022-07-19

FAILED - RETRYING: Joining control plane node to the cluster. (3 retries left).Result was: {
    "attempts": 1,
    "changed": true,
    "cmd": "if [ -f /etc/kubernetes/manifests/kube-apiserver.yaml ]; then /usr/local/bin/kubeadm reset -f --cert-dir /etc/kubernetes/ssl; fi && /usr/local/bin/kubeadm join --config /etc/kubernetes/kubeadm-controlplane.yaml --ignore-preflight-errors=all",
    "delta": "0:05:00.183877",
    "end": "2022-07-19 18:45:02.732769",
    "invocation": {
        "module_args": {
            "_raw_params": "if [ -f /etc/kubernetes/manifests/kube-apiserver.yaml ]; then /usr/local/bin/kubeadm reset -f --cert-dir /etc/kubernetes/ssl; fi && /usr/local/bin/kubeadm join --config /etc/kubernetes/kubeadm-controlplane.yaml --ignore-preflight-errors=all",
            "_uses_shell": true,
            "argv": null,
            "chdir": null,
            "creates": null,
            "executable": null,
            "removes": null,
            "stdin": null,
            "stdin_add_newline": true,
            "strip_empty_ends": true,
            "warn": true
        }
    },
    "msg": "non-zero return code",
    "rc": 1,
    "retries": 4,
    "start": "2022-07-19 18:40:02.548892",
    "stderr": "error execution phase preflight: couldn't validate the identity of the API Server: configmaps \"cluster-info\" is forbidden: User \"system:anonymous\" cannot get resource \"configmaps\" in API group \"\" in the namespace \"kube-public\"\nTo see the stack trace of this error execute with --v=5 or higher",
    "stderr_lines": [
        "error execution phase preflight: couldn't validate the identity of the API Server: configmaps \"cluster-info\" is forbidden: User \"system:anonymous\" cannot get resource \"configmaps\" in API group \"\" in the namespace \"kube-public\"",
        "To see the stack trace of this error execute with --v=5 or higher"
    ],
    "stdout": "[preflight] Running pre-flight checks",
    "stdout_lines": [
        "[preflight] Running pre-flight checks"
    ]
}

老师，我碰到了这个问题，麻烦帮看看是什么原因？

写回答

2回答

qq_imba的bug_zBIZ29

2022-12-21

你好，你解决了吗，我也遇到了一样的问题，ssh免密登录是没有问题的

泰瑞亚小泰蜜

提问者

2022-07-19

上下文：

```

(1, b'\n{"changed": true, "end": "2022-07-19 18:50:08.069799", "stdout": "[preflight] Running pre-flight checks", "cmd": "if [ -f /etc/kubernetes/manifests/kube-apiserver.yaml ]; then /usr/local/bin/kubeadm reset -f --cert-dir /etc/kubernetes/ssl; fi && /usr/local/bin/kubeadm join --config /etc/kubernetes/kubeadm-controlplane.yaml --ignore-preflight-errors=all", "failed": true, "delta": "0:05:00.178228", "stderr": "error execution phase preflight: couldn\'t validate the identity of the API Server: configmaps \\"cluster-info\\" is forbidden: User \\"system:anonymous\\" cannot get resource \\"configmaps\\" in API group \\"\\" in the namespace \\"kube-public\\"\\nTo see the stack trace of this error execute with --v=5 or higher", "rc": 1, "invocation": {"module_args": {"creates": null, "executable": null, "_uses_shell": true, "strip_empty_ends": true, "_raw_params": "if [ -f /etc/kubernetes/manifests/kube-apiserver.yaml ]; then /usr/local/bin/kubeadm reset -f --cert-dir /etc/kubernetes/ssl; fi && /usr/local/bin/kubeadm join --config /etc/kubernetes/kubeadm-controlplane.yaml --ignore-preflight-errors=all", "removes": null, "argv": null, "warn": true, "chdir": null, "stdin_add_newline": true, "stdin": null}}, "start": "2022-07-19 18:45:07.891571", "msg": "non-zero return code"}\n', b'OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug1: /etc/ssh/ssh_config line 58: Applying options for *\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 3 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 4607\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 1\r\n')

<10.0.12.2> Failed to connect to the host via ssh: OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017

debug1: Reading configuration data /etc/ssh/ssh_config

debug1: /etc/ssh/ssh_config line 58: Applying options for *

debug1: auto-mux: Trying existing master

debug2: fd 3 setting O_NONBLOCK

debug2: mux_client_hello_exchange: master version 4

debug3: mux_client_forwards: request forwardings: 0 local, 0 remote

debug3: mux_client_request_session: entering

debug3: mux_client_request_alive: entering

debug3: mux_client_request_alive: done pid = 4607

debug3: mux_client_request_session: session request sent

debug1: mux_client_request_session: master session id: 2