Minikube：远程错误 tls：证书错误

Question

我正在学习 Kubernetes 教程，但无法运行第一个命令 ( minikube start --vm-driver=hyperkit)。我在 macOs Monterey 上使用 MacBook Pro Intel。由于 TLS 错误，我无法使其工作。

\n

$ minikube start --vm-driver=hyperkit\n  minikube v1.25.2 on Darwin 12.2.1\n  Kubernetes 1.23.3 is now available. If you would like to upgrade, specify: --kubernetes-version=v1.23.3\n\xe2\x9c\xa8  Using the hyperkit driver based on existing profile\n  Starting control plane node minikube in cluster minikube\n  Restarting existing hyperkit VM for "minikube" ...\n  Preparing Kubernetes v1.20.2 on Docker 20.10.3 ...\n\xe2\x9d\x8c  Problems detected in etcd [592b8a58065e]:\n    2022-03-19 22:12:03.193985 I | embed: rejected connection from "127.0.0.1:38132" (error "remote error: tls: bad certificate", ServerName "")\n

\n

我试过 ：

\n

\n
1. 重新启动计算机：https ://github.com/kubernetes/minikube/issues/4329
\n
2. 使用的--embed-certs参数
\n

\n

$ minikube start --vm-driver=hyperkit\n  minikube v1.25.2 on Darwin 12.2.1\n  Kubernetes 1.23.3 is now available. If you would like to upgrade, specify: --kubernetes-version=v1.23.3\n\xe2\x9c\xa8  Using the hyperkit driver based on existing profile\n  Starting control plane node minikube in cluster minikube\n  Restarting existing hyperkit VM for "minikube" ...\n  Preparing Kubernetes v1.20.2 on Docker 20.10.3 ...\n\xe2\x9d\x8c  Problems detected in etcd [592b8a58065e]:\n    2022-03-19 22:12:03.193985 I | embed: rejected connection from "127.0.0.1:38132" (error "remote error: tls: bad certificate", ServerName "")\n

\n

我是 K8s 新手，什么会导致这种行为？

\n

---

\n

我用自制软件安装了 minikube 和 hyperkit。当我显示 kubectl 版本时，我收到另一个连接错误：

\n

$ minikube start --vm-driver=hyperkit --embed-certs\n  minikube v1.25.2 on Darwin 12.2.1\n  Kubernetes 1.23.3 is now available. If you would like to upgrade, specify: --kubernetes-version=v1.23.3\n\xe2\x9c\xa8  Using the hyperkit driver based on existing profile\n  Starting control plane node minikube in cluster minikube\n  Restarting existing hyperkit VM for "minikube" ...\n  Preparing Kubernetes v1.20.2 on Docker 20.10.3 ...\n\xe2\x9d\x8c  Problems detected in etcd [78d1e36569b8]:\n    2022-03-19 22:20:53.503532 I | embed: rejected connection from "127.0.0.1:34926" (error "remote error: tls: bad certificate", ServerName "")\n

\n

Answer 1

错误kubectl version帮助：\n无法连接到服务器：拨号 tcp i/o 超时

\n

看来我已经玩过 k8s 了：

\n

$ kubectl config view\napiVersion: v1\nclusters:\n- cluster:\n    certificate-authority: /Users/xxx/.minikube/ca.crt\n    extensions:\n    - extension:\n        last-update: Sat, 13 Mar 2021 13:40:06 CET\n        provider: minikube.sigs.k8s.io\n        version: v1.18.1\n      name: cluster_info\n    server: https://192.168.64.2:8443\n  name: minikube\ncontexts:\n- context:\n    cluster: minikube\n    extensions:\n    - extension:\n        last-update: Sat, 13 Mar 2021 13:40:06 CET\n        provider: minikube.sigs.k8s.io\n        version: v1.18.1\n      name: context_info\n    namespace: default\n    user: minikube\n  name: minikube\ncurrent-context: minikube\nkind: Config\npreferences: {}\nusers:\n- name: minikube\n  user:\n    client-certificate: /Users/xxx/.minikube/profiles/minikube/client.crt\n    client-key: /Users/xxx/.minikube/profiles/minikube/client.key\n\n

\n

首先我删除了现有的集群：

\n

$ kubectl config delete-cluster minikube\ndeleted cluster minikube from /Users/xxx/.kube/config\n

\n

然后运行

\n

$ kubectl config delete-cluster minikube\ndeleted cluster minikube from /Users/xxx/.kube/config\n

\n

最后 ：

\n

$ minikube delete\n  Deleting "minikube" in hyperkit ...\n  Removed all traces of the "minikube" cluster.\n

\n