问题遇到的现象和发生背景
# 安装metrics-server
[root@k8s-master01 1.8+]# kubectl apply -f ./
# 查看pod运行情况
[root@k8s-master01 1.8+]# kubectl get pod -n kube-system
metrics-server-6b976979db-2xwbj 1/1 Running 0 90s
# 使用kubectl top node 查看资源使用情况
[root@k8s-master01 1.8+]# kubectl top node
NAME CPU(cores) CPU% MEMORY(bytes) MEMORY%
k8s-master01 289m 14% 1582Mi 54%
k8s-node01 81m 4% 1195Mi 40%
k8s-node02 72m 3% 1211Mi 41%
[root@k8s-master01 1.8+]# kubectl top pod -n kube-system
NAME CPU(cores) MEMORY(bytes)
coredns-6955765f44-7ptsb 3m 9Mi
coredns-6955765f44-vcwr5 3m 8Mi
etcd-master 14m 145Mi
...
# 至此,metrics-server安装完成
问题相关代码,请勿粘贴截图
root@master ~]# kubectl apply -f ./
Unable to connect to the server: dial tcp: lookup api.k8seasy.com on 114.114.114.114:53: read udp 192.168.159.11:40717->114.114.114.114:53: i/o timeout
[root@master ~]# kubectl get pod -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-59748948d4-2kjtk 1/1 Running 6 2d11h
[root@master ~]# kubectl top node
Error from server (ServiceUnavailable): the server is currently unable to handle the request (get nodes.metrics.k8s.io)
运行结果及报错内容
: tls: client offered only unsupported versions: [300]
[root@master ~]# systemctl status kube-apiserver -l
● kube-apiserver.service - Kubernetes API Server
Loaded: loaded (/etc/systemd/system/kube-apiserver.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2022-03-02 22:05:03 CST; 6min ago
Docs: https://github.com/GoogleCloudPlatform/kubernetes
Main PID: 1161 (kube-apiserver)
Tasks: 13
Memory: 534.1M
CGroup: /system.slice/kube-apiserver.service
└─1161 /etc/k8s/k8sapi/api/kube-apiserver --advertise-address=192.168.159.11 --default-not-ready-toleration-seconds=360 --default-unreachable-toleration-seconds=360 --feature-gates=DynamicAuditing=true --audit-dynamic-configuration --max-mutating-requests-inflight=2000 --max-requests-inflight=4000 --default-watch-cache-size=200 --delete-collection-workers=2 --encryption-provider-config=/etc/k8s/k8sapi/encryption/encryption-config.yaml --etcd-cafile=/etc/k8s/cert/ca.pem --etcd-certfile=/etc/k8s/k8sapi/cert/kubernetes.pem --etcd-keyfile=/etc/k8s/k8sapi/cert/kubernetes-key.pem --etcd-servers=https://192.168.159.11:2379 --bind-address=192.168.159.11 --secure-port=6443 --tls-cert-file=/etc/k8s/k8sapi/cert/kubernetes.pem --tls-private-key-file=/etc/k8s/k8sapi/cert/kubernetes-key.pem --insecure-port=7803 --audit-log-maxage=15 --audit-log-maxbackup=3 --audit-log-maxsize=100 --audit-log-truncate-enabled --audit-log-path=/var/log/k8s/kube-apiserver-audit.log --audit-policy-file=/etc/k8s/k8sapi/encryption/audit-policy.yaml --profiling --anonymous-auth=false --client-ca-file=/etc/k8s/cert/ca.pem --enable-bootstrap-token-auth --requestheader-allowed-names="aggregator" --requestheader-client-ca-file=/etc/k8s/cert/ca.pem --requestheader-extra-headers-prefix="X-Remote-Extra-" --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --service-account-key-file=/etc/k8s/cert/ca.pem --authorization-mode=Node,RBAC --runtime-config=api/all=true --enable-admission-plugins=NodeRestriction --allow-privileged=true --apiserver-count=1 --event-ttl=168h --kubelet-certificate-authority=/etc/k8s/cert/ca.pem --kubelet-client-certificate=/etc/k8s/k8sapi/cert/kubernetes.pem --kubelet-client-key=/etc/k8s/k8sapi/cert/kubernetes-key.pem --kubelet-https=true --kubelet-timeout=10s --proxy-client-cert-file=/etc/k8s/k8sapi/cert/proxy-client.pem --proxy-client-key-file=/etc/k8s/k8sapi/cert/proxy-client-key.pem --service-cluster-ip-range=10.254.0.0/16 --service-node-port-range=8400-11000 --logtostderr=true --enable-swagger-ui=true --v=2
Mar 02 22:11:12 master kube-apiserver[1161]: I0302 22:11:12.522515 1161 log.go:172] http: TLS handshake error from 192.168.159.11:36958: tls: client offered only unsupported versions: [300]
Mar 02 22:11:14 master kube-apiserver[1161]: I0302 22:11:14.473853 1161 log.go:172] http: TLS handshake error from 192.168.159.13:59656: tls: client offered only unsupported versions: [300]
Mar 02 22:11:14 master kube-apiserver[1161]: I0302 22:11:14.503059 1161 log.go:172] http: TLS handshake error from 192.168.159.12:39792: tls: client offered only unsupported versions: [300]
Mar 02 22:11:14 master kube-apiserver[1161]: I0302 22:11:14.524924 1161 log.go:172] http: TLS handshake error from 192.168.159.11:36960: tls: client offered only unsupported versions: [300]
Mar 02 22:11:16 master kube-apiserver[1161]: I0302 22:11:16.479481 1161 log.go:172] http: TLS handshake error from 192.168.159.13:59658: tls: client offered only unsupported versions: [300]
Mar 02 22:11:16 master kube-apiserver[1161]: I0302 22:11:16.511103 1161 log.go:172] http: TLS handshake error from 192.168.159.12:39794: tls: client offered only unsupported versions: [300]
Mar 02 22:11:16 master kube-apiserver[1161]: I0302 22:11:16.526913 1161 log.go:172] http: TLS handshake error from 192.168.159.11:36962: tls: client offered only unsupported versions: [300]
Mar 02 22:11:18 master kube-apiserver[1161]: I0302 22:11:18.480675 1161 log.go:172] http: TLS handshake error from 192.168.159.13:59660: tls: client offered only unsupported versions: [300]
Mar 02 22:11:18 master kube-apiserver[1161]: I0302 22:11:18.513739 1161 log.go:172] http: TLS handshake error from 192.168.159.12:39796: tls: client offered only unsupported versions: [300]
Mar 02 22:11:18 master kube-apiserver[1161]: I0302 22:11:18.529010 1161 log.go:172] http: TLS handshake error from 192.168.159.11:36966: tls: client offered only unsupported versions: [300]
我的解答思路和尝试过的方法
我想要达到的结果