二进制安装k8s ,启动kube-apiserver报错
Error: [--etcd-servers must be specified, service-account-issuer is a required flag, --service-account-signing-key-file and --service-account-issuer are required flags]
试过吧 sa.pub,sa.key修改为ca-key.pem
KUBE_APISERVER_etcS="--logtostderr=false
--v=2
--log-dir=/etc/kubernetes/logs
--etcd-servers=https://192.168.190.200:2379,https://192.168.190.201:2379
--bind-address=0.0.0.0
--secure-port=6443
--advertise-address=192.168.190.200
--allow-privileged=true
--service-cluster-ip-range=10.96.0.0/16
--enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota,NodeRestriction
--authorization-mode=RBAC,Node
--enable-bootstrap-token-auth=true
--token-auth-file=/etc/kubernetes/token.csv
--service-node-port-range=30000-32767
--kubelet-client-certificate=/etc/kubernetes/pki/server.pem
--kubelet-client-key=/etc/kubernetes/pki/server-key.pem
--tls-cert-file=/etc/kubernetes/pki/server.pem
--tls-private-key-file=/etc/kubernetes/pki/server-key.pem
--client-ca-file=/etc/kubernetes/pki/ca.pem
--service-account-key-file=/etc/kubernetes/pki/sa.pub
--service-account-signing-key-file=/etc/kubernetes/pki/sa.key
--service-account-issuer=https://kubernetes.default.svc.cluster.local
--etcd-cafile=/etc/etcd/ssl/ca.pem
--etcd-certfile=/etc/etcd/ssl/server.pem
--etcd-keyfile=/etc/etcd/ssl/server-key.pem
--requestheader-client-ca-file=/etc/kubernetes/pki/ca.pem
--proxy-client-cert-file=/etc/kubernetes/pki/server.pem
--proxy-client-key-file=/etc/kubernetes/pki/server-key.pem
--requestheader-allowed-names=kubernetes
--requestheader-extra-headers-prefix=X-Remote-Extra-
--requestheader-group-headers=X-Remote-Group
--requestheader-username-headers=X-Remote-User
--enable-aggregator-routing=true
--audit-log-maxage=30
--audit-log-maxbackup=3
--audit-log-maxsize=100
--audit-log-path=/etc/kubernetes/logs/k8s.log"
