一、 Kubectl create -f test.yaml遇到No API token found for service account "default"錯誤

配置serviceaccounts

openssl genrsa -out /etc/kubernetes/serviceaccount.key 2048

編輯/etc/kubernetes/apiserver

KUBE_API_ARGS="--service_account_key_file=/etc/kubernetes/serviceaccount.key"

編輯/etc/kubernetes/controller-manager

KUBE_CONTROLLER_MANAGER_ARGS="--service_account_private_key_file=/etc/kubernetes/serviceaccount.key"

重啟服務

systemctl restart etcd kube-apiserver kube-manager kube-scheduler

二、建立pod不成功

kubectl create -f test.yaml後建立的pods

通過kubectl get pod 發現是一直建立狀態

通過kubectl describe pod 發出是有”image pull failed for registry.access.redhat.com/rhel7/pod-infrastructure:latest”

這個是因為缺少證書，安裝

yum -y install *rhsm*

wget http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm

rpm2cpio python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem