Kubeadm: Kubeadm init๋Š” "์ œ์–ด ํ‰๋ฉด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€์•ผ ํ•˜๋Š” ๊ฒฝ์šฐ 1๋ถ„ ์ด์ƒ ๊ฑธ๋ฆด ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

์— ๋งŒ๋“  2018๋…„ 01์›” 31์ผ  ยท  67์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: kubernetes/kubeadm

๋ฒ„์ „

kubeadm ๋ฒ„์ „ ( kubeadm version ์‚ฌ์šฉ):

ํ™˜๊ฒฝ :

  • Kubernetes ๋ฒ„์ „ ( kubectl version ์‚ฌ์šฉ):v1.9.2
  • ํด๋ผ์šฐ๋“œ ์ œ๊ณต์ž ๋˜๋Š” ํ•˜๋“œ์›จ์–ด ๊ตฌ์„ฑ :Virtual Box
  • OS (์˜ˆ: /etc/os-release):Ubuntu 16.04.0 LTS(Xeniak Xerus) amd64
  • ์ปค๋„ (์˜ˆ: uname -a ):linux 4.4.0-62-generic
  • ๊ธฐํƒ€ :kubeadm ๋ฒ„์ „:v1.9.2: amd64, kubelet ๋ฒ„์ „:v1.9.2 amd64, kubernetes-cni ๋ฒ„์ „:0.6.0-00 amd64, docker ๋ฒ„์ „:17.03.2-ce

๋ฌด์Šจ ์ผ์ด์—์š”?

kubeadm init๋ฅผ ์‹คํ–‰ํ•˜๋ ค๊ณ  ํ•˜๋ฉด ๋‹ค์Œ๊ณผ ๊ฐ™์ด ์ค‘๋‹จ๋ฉ๋‹ˆ๋‹ค.
xx@xx :~$ sudo kubeadm ์ดˆ๊ธฐํ™” --kubernetes-version=v1.9.2

[์ดˆ๊ธฐํ™”] Kubernetes ๋ฒ„์ „ ์‚ฌ์šฉ: v1.9.2
[์ดˆ๊ธฐํ™”] ๊ถŒํ•œ ๋ถ€์—ฌ ๋ชจ๋“œ ์‚ฌ์šฉ: [๋…ธ๋“œ RBAC]
[์‹คํ–‰ ์ „] ์‹คํ–‰ ์ „ ๊ฒ€์‚ฌ๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  FileExisting-crictl]: ์‹œ์Šคํ…œ ๊ฒฝ๋กœ์—์„œ crictl์„ ์ฐพ์„ ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ] kubelet ์„œ๋น„์Šค ์‹œ์ž‘
[์ธ์ฆ์„œ] CA ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ apiserver ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] apiserver ์„œ๋น™ ์ธ์ฆ์„œ๋Š” DNS ์ด๋ฆ„ [kickseed kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] ๋ฐ IP [10.96.0.1 172.17.41.15]์— ๋Œ€ํ•ด ์„œ๋ช…๋˜์—ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] apiserver-kubelet-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] sa ํ‚ค์™€ ๊ณต๊ฐœ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ front-proxy-ca ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ ํ”„๋ŸฐํŠธ ํ”„๋ก์‹œ ํด๋ผ์ด์–ธํŠธ ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์œ ํšจํ•œ ์ธ์ฆ์„œ ๋ฐ ํ‚ค๊ฐ€ ์ด์ œ "/etc/kubernetes/pki"์— ์žˆ์Šต๋‹ˆ๋‹ค.
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "admin.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "kubelet.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "controller-manager.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "scheduler.conf"
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-apiserver์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-apiserver.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-controller-manager์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-controller-manager.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ œ์–ดํŒ] ๊ตฌ์„ฑ ์š”์†Œ kube-scheduler์— ๋Œ€ํ•œ ์ •์  ํฌ๋“œ ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-scheduler.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[etcd] ๋กœ์ปฌ etcd ์ธ์Šคํ„ด์Šค์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/etcd.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] kubelet์ด "/etc/kubernetes/manifests" ๋””๋ ‰ํ† ๋ฆฌ์—์„œ Static Pod๋กœ ์ปจํŠธ๋กค ํ”Œ๋ ˆ์ธ์„ ๋ถ€ํŒ…ํ•˜๊ธฐ๋ฅผ ๊ธฐ๋‹ค๋ฆฝ๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] ์ œ์–ด ํ‰๋ฉด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€์•ผ ํ•˜๋Š” ๊ฒฝ์šฐ 1๋ถ„ ์ด์ƒ ๊ฑธ๋ฆด ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

๊ทธ๋Ÿฐ ๋‹ค์Œ kubelet ๋กœ๊ทธ๋ฅผ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค.
xx@xx :~$ sudo journalctl -xeu kubelet:
Jan 31 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.280984 28516 remote_runtime.go:92] ๋Ÿฐํƒ€์ž„ ์„œ๋น„์Šค์˜ RunPodSandbox ์‹คํŒจ: rpc ์˜ค๋ฅ˜: ์ฝ”๋“œ = ์•Œ ์ˆ˜ ์—†๋Š” ์„ค๋ช… = ์ด๋ฏธ์ง€ "gcr.io/google์„ ๊ฐ€์ ธ์˜ค์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. pause-amd64:3.0": ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: https://gcr.io/v1/_ping ๊ฐ€์ ธ์˜ค๊ธฐ: ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ
1์›” 31์ผ 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.281317 28516 kuberuntime_sandbox.go:54] "kube-scheduler-kickseed_kube-system074์— ๋Œ€ํ•œ CreatePodSandbox" = "gcr.io/google_containers/pause-amd64:3.0" ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ ์‹คํŒจ: ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: Get https://gcr.io/v1/_ping : ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ
1์›” 31์ผ 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.281580 28516 kuberuntime_manager.go:647] createPodcd60 codecdcd60 "kube-scheduler-kickseed_kube-system(6)์— ๋Œ€ํ•œ codecdcd6b0 codecd60" = "gcr.io/google_containers/pause-amd64:3.0" ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ ์‹คํŒจ: ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: Get https://gcr.io/v1/_ping : ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ
1 ์›” 31 ์ผ 14:45:03 [28516] : E0131 14 : 45 : 03.281875 28516 Pod_Workers.go : 186.281875 28516 Pod_Workers.go : 186 Pod Syncing Pod 69C12074E336B0DBD074E336B0DBBD0A1666CE05226A ( "Kube-Scheduler-kickseed_kube-system (69C12074E336B0DBBD0A166CE05226A ์‹œ์Šคํ…œ)"), ๊ฑด๋„ˆ ๋›ฐ๊ธฐ : " \"kube-scheduler-kickseed_kube-system(69c12074e336b0dbbd0a1666ce05226a)"์— ๋Œ€ํ•œ CreatePodSandbox ์‹คํŒจ: \"kube-scheduler-kickseed_c31-system(709)์— ๋Œ€ํ•œ CreatePodSandbox = deknownsandboxError: "CreatePodSandbox\"code0bb ๊ฐ€์ ธ์˜ค๊ธฐ "gcr.io/google_containers/pause-amd64:3.0\": ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: Get https://gcr.io/v1/_ping : ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ"
Jan 31 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.380290 28516 event.go:209] ์ด๋ฒคํŠธ๋ฅผ ์“ธ ์ˆ˜ ์—†์Œ: 'ํŒจ์น˜ https://172.17.41.15:6443/namesapi/v1 /events/kickseed.150ecf46afb098b7: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€๋จ'(์ž ์ž๊ธฐ ํ›„ ๋‹ค์‹œ ์‹œ๋„ํ•  ์ˆ˜ ์žˆ์Œ)
1์›” 31์ผ 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.933783 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: *v๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. ํฌ๋“œ: ๊ฐ€์ ธ์˜ค๊ธฐ https://172.17.41.15 :6443/api/v1/pods?fieldSelector=spec.nodeName%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.934707 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:474: ๋…ธ๋“œ ๋‚˜์—ด ์‹คํŒจ *v Get https://172.17.41.15 :6443/api/v1/nodes?fieldSelector=metadata.name%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:45:03 kickseed kubelet[28516]: E0131 14:45:03.935921 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:465: ์„œ๋น„์Šค๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. Get https://172.17.41.15 :6443/api/v1/services?limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:45:04 kickseed kubelet[28516]: E0131 14:45:04.281024 28516 remote_runtime.go:92] ๋Ÿฐํƒ€์ž„ ์„œ๋น„์Šค์˜ RunPodSandbox ์‹คํŒจ: rpc ์˜ค๋ฅ˜: ์ฝ”๋“œ = ์•Œ ์ˆ˜ ์—†๋Š” ์„ค๋ช… = ์ด๋ฏธ์ง€ "gcr.io/google์„ ๊ฐ€์ ธ์˜ค์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. pause-amd64:3.0": ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: https://gcr.io/v1/_ping ๊ฐ€์ ธ์˜ค๊ธฐ: ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ
Jan 31 14:45:04 kickseed kubelet[28516]: E0131 14:45:04.281352 28516 kuberuntime_sandbox.go:54] CreatePodSandbox for pod "kube-controller-manager-kickseed_kube-system(65516) ์•Œ ์ˆ˜ ์—†๋Š” ์„ค๋ช… = "gcr.io/google_containers/pause-amd64:3.0" ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ ์‹คํŒจ: ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: https://gcr.io/v1/_ping ๊ฐ€์ ธ์˜ค๊ธฐ: ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ
1์›” 31์ผ 14:45:04 kickseed kubelet[28516]: E0131 14:45:04.281634 28516 kuberuntime_manager.go:647] pod "kube-controller-manager-kickseed_kube-647"์— ๋Œ€ํ•œ createPodcfcee6 error5dccfe6 error5dpcfee2004 ์•Œ ์ˆ˜ ์—†๋Š” ์„ค๋ช… = "gcr.io/google_containers/pause-amd64:3.0" ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ ์‹คํŒจ: ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: https://gcr.io/v1/_ping ๊ฐ€์ ธ์˜ค๊ธฐ: ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ
1 ์›” 31 ์ผ 14:45:04 kickeed kubelet [28516] : e0131 14 : 45 : 04.281938 28516 Pod_Workers.go : 186.Go.Go : 186.114 : 04.281938 28516 Pod_Workers.go : Pod 6546D6Faf0B50C9FC6712CE25EE9B6CB ( "Kube-Controller-Manager-Kickseed_Kube-system (6546D6FAF0B50C9FC6712CE25EE9B6CB)"), ๊ฑด๋„ˆ ๋›ฐ๊ธฐ : ์‹คํŒจ = "kube-controller-manager-kickseed_kube-system(6546d6faf0b50c9fc6712ce25ee9b6cb)"์— ๋Œ€ํ•œ "CreatePodSandbox"์— ์‹คํŒจ: CreatePodSandboxError: "CreatePodSandbox for pod \"kube-controller\manager-kickseed_kube6) desc = ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ ์‹คํŒจ \"gcr.io/google_containers/pause-amd64:3.0\": ๋ฐ๋ชฌ์˜ ์˜ค๋ฅ˜ ์‘๋‹ต: https://gcr.io/v1/_ping ๊ฐ€์ ธ์˜ค๊ธฐ: ๋‹ค์ด์–ผ tcp 172.217.6.127:443: i/o ์‹œ๊ฐ„ ์ดˆ๊ณผ"
Jan 31 14:45:04 kickseed kubelet[28516]: E0131 14:45:04.934694 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: *v ๋‚˜์—ด์— ์‹คํŒจํ–ˆ์Šต๋‹ˆ๋‹ค. ํฌ๋“œ: ๊ฐ€์ ธ์˜ค๊ธฐ https://172.17.41.15 :6443/api/v1/pods?fieldSelector=spec.nodeName%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:45:04 kickseed kubelet[28516]: E0131 14:45:04.935613 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:471: ๋…ธ๋“œ ๋‚˜์—ด ์‹คํŒจ *v Get https://172.17.41.15 :6443/api/v1/nodes?fieldSelector=metadata.name%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:45:04 kickseed kubelet[28516]: E0131 14:45:04.936669 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:465: ์„œ๋น„์Šค๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. Get https://172.17.41.15 :6443/api/v1/services?limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:45:05 kickseed kubelet[28516]: W0131 14:45:05.073692 28516 cni.go:171] cni ๊ตฌ์„ฑ์„ ์—…๋ฐ์ดํŠธํ•  ์ˆ˜ ์—†์Œ: /etc/cni/net.d์— ๋„คํŠธ์›Œํฌ๊ฐ€ ์—†์Šต๋‹ˆ๋‹ค.
Jan 31 14:45:05 kickseed kubelet[28516]: E0131 14:45:05.074106 28516 kubelet.go:2105] ์ปจํ…Œ์ด๋„ˆ ๋Ÿฐํƒ€์ž„ ๋„คํŠธ์›Œํฌ๊ฐ€ ์ค€๋น„๋˜์ง€ ์•Š์Œ: NetworkReady=false ์ด์œ :NetworkPluginNotReady ๋ฉ”์‹œ์ง€๊ฐ€ ์ค€๋น„๋˜์ง€ ์•Š์Œ:docker : ๋„คํŠธ์›Œํฌ ํ”Œ๋Ÿฌ๊ทธ์ธ ์ดˆ๊ธฐํ™”๋˜์ง€ ์•Š์€
1์›” 31์ผ 14:45:05 kickseed kubelet[28516]: E0131 14:45:05.935680 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: *v๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. ํฌ๋“œ: ๊ฐ€์ ธ์˜ค๊ธฐ https://172.17.41.15 :6443/api/v1/pods?fieldSelector=spec.nodeName%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:45:05 kickseed kubelet[28516]: E0131 14:45:05.937423 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:474: ๋…ธ๋“œ ๋‚˜์—ด ์‹คํŒจ *v Get https://172.17.41.15 :6443/api/v1/nodes?fieldSelector=metadata.name%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:45:05 kickseed kubelet[28516]: E0131 14:45:05.937963 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:465: ์„œ๋น„์Šค๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. Get https://172.17.41.15 :6443/api/v1/services?limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:45:05 kickseed kubelet[28516]: I0131 14:45:05.974034 28516 kubelet_node_status.go:273] ๋ณผ๋ฅจ ์ปจํŠธ๋กค๋Ÿฌ ์—ฐ๊ฒฐ/๋ถ„๋ฆฌ๋ฅผ ํ™œ์„ฑํ™”ํ•˜๊ธฐ ์œ„ํ•œ ๋…ธ๋“œ ์ฃผ์„ ์„ค์ •
Jan 31 14:45:06 kickseed kubelet[28516]: I0131 14:45:06.802447 28516 kubelet_node_status.go:273] ๋ณผ๋ฅจ ์ปจํŠธ๋กค๋Ÿฌ ์—ฐ๊ฒฐ/๋ถ„๋ฆฌ๋ฅผ ํ™œ์„ฑํ™”ํ•˜๊ธฐ ์œ„ํ•œ ๋…ธ๋“œ ์ฃผ์„ ์„ค์ •
Jan 31 14:45:06 kickseed kubelet[28516]: I0131 14:45:06.804242 28516 kubelet_node_status.go:82] ๋…ธ๋“œ ํ‚ฅ์‹œ๋“œ ๋“ฑ๋ก ์‹œ๋„
Jan 31 14:45:06 kickseed kubelet[28516]: E0131 14:45:06.804778 28516 kubelet_node_status.go:106] API ์„œ๋ฒ„์— "kickseed" ๋…ธ๋“œ๋ฅผ ๋“ฑ๋กํ•  ์ˆ˜ ์—†์Œ: Post https ://1743.157.4 v1/๋…ธ๋“œ: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: con

xx@xx :~$ sudo systemctl ์ƒํƒœ kubelet:

kubelet.service - kubelet: Kubernetes ๋…ธ๋“œ ์—์ด์ „ํŠธ
๋กœ๋“œ๋จ: ๋กœ๋“œ๋จ(/lib/systemd/system/kubelet.service; ํ™œ์„ฑํ™”๋จ, ๊ณต๊ธ‰์—…์ฒด ์‚ฌ์ „ ์„ค์ •: ํ™œ์„ฑํ™”๋จ)
๋“œ๋กญ์ธ: /etc/systemd/system/kubelet.service.d
โ””โ”€11-kubeadm.conf, 10-kubeadm1.conf, 90-local-extras.conf
ํ™œ์„ฑ: ํ™œ์„ฑ(์‹คํ–‰ ์ค‘) ์ดํ›„ Wed 2018-01-31 13:53:46 CST; 49๋ถ„ ์ „
๋ฌธ์„œ: http://kubernetes.io/docs/
๋ฉ”์ธ PID: 28516(kubelet)
์ž‘์—…: 13
๋ฉ”๋ชจ๋ฆฌ: 37.8M
CPU: 22.767์ดˆ
C๊ทธ๋ฃน: /system.slice/kubelet.service
โ””โ”€28516 /usr/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --pod-manifest-path=/etc/kubernetes/ ๋งค๋‹ˆํŽ˜์ŠคํŠธ --allow-privileged=true --cgroup-driver=cgroupfs --network-plugin=cni --cni-conf-dir=/etc/cni/net.d --cni-bin-dir=/opt/cni /bin --cluster-dns=10.96.0.10 --cluster-domain=cluster.local --authorization-mode=Webhook --client-ca-file=/etc/kubernetes/pki/ca.crt --cadvisor-port =0 --rotate-certificates=true --cert-dir=/var/lib/kubelet/pki --fail-swap-on=false

1์›” 31์ผ 14:43:17 kickseed kubelet[28516]: E0131 14:43:17.862590 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:474: ๋…ธ๋“œ ๋‚˜์—ด ์‹คํŒจ *v Get https://172.17.41.15 :6443/api/v1/nodes?fieldSelector=metadata.name%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:43:17 kickseed kubelet[28516]: E0131 14:43:17.863474 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:465: ์„œ๋น„์Šค๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. Get https://172.17.41.15 :6443/api/v1/services?limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:43:18 kickseed kubelet[28516]: E0131 14:43:18.621818 28516 event.go:209] ์ด๋ฒคํŠธ๋ฅผ ์“ธ ์ˆ˜ ์—†์Œ: 'ํŒจ์น˜ https://172.17.41.15:6443/namesapi/v1 /events/kickseed.150ecf46afb098b7: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€๋จ'(์ž ์ž๊ธฐ ํ›„ ๋‹ค์‹œ ์‹œ๋„ํ•  ์ˆ˜ ์žˆ์Œ)
Jan 31 14:43:18 kickseed kubelet[28516]: E0131 14:43:18.862440 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: *v๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. ํฌ๋“œ: ๊ฐ€์ ธ์˜ค๊ธฐ https://172.17.41.15 :6443/api/v1/pods?fieldSelector=spec.nodeName%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:43:18 kickseed kubelet[28516]: E0131 14:43:18.863379 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:474: ๋…ธ๋“œ ๋‚˜์—ด ์‹คํŒจ *v Get https://172.17.41.15 :6443/api/v1/nodes?fieldSelector=metadata.name%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:43:18 kickseed kubelet[28516]: E0131 14:43:18.864424 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:465: ์„œ๋น„์Šค ๋‚˜์—ด ์‹คํŒจ Get https://172.17.41.15 :6443/api/v1/services?limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:43:19 kickseed kubelet[28516]: E0131 14:43:19.255460 28516 eviction_manager.go:238] ํ‡ด๊ฑฐ ๊ด€๋ฆฌ์ž: ์˜ˆ๊ธฐ์น˜ ์•Š์€ ์˜ค๋ฅ˜: ๋…ธ๋“œ ์ •๋ณด๋ฅผ ๊ฐ€์ ธ์˜ค์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค: ๋…ธ๋“œ "kickseed"๋ฅผ ์ฐพ์„ ์ˆ˜ ์—†์Œ
1์›” 31์ผ 14:43:19 kickseed kubelet[28516]: E0131 14:43:19.863266 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: *v๋ฅผ ๋‚˜์—ดํ•˜์ง€ ๋ชปํ–ˆ์Šต๋‹ˆ๋‹ค. ํฌ๋“œ: ๊ฐ€์ ธ์˜ค๊ธฐ https://172.17.41.15 :6443/api/v1/pods?fieldSelector=spec.nodeName%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
1์›” 31์ผ 14:43:19 kickseed kubelet[28516]: E0131 14:43:19.864238 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:474: ๋…ธ๋“œ ๋‚˜์—ด ์‹คํŒจ *v Get https://172.17.41.15 :6443/api/v1/nodes?fieldSelector=metadata.name%3Dkickseed&limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€
Jan 31 14:43:19 kickseed kubelet[28516]: E0131 14:43:19.865262 28516 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/kubelet.go:465: ์„œ๋น„์Šค ๋‚˜์—ด ์‹คํŒจ Get https://172.17.41.15 :6443/api/v1/services?limit=500&resourceVersion=0: ๋‹ค์ด์–ผ tcp 172.17.41.15:6443: getsockopt: ์—ฐ๊ฒฐ ๊ฑฐ๋ถ€

์ผ๋ถ€ ๋„์ปค ์ด๋ฏธ์ง€๋Š” ๋‹ค์Œ๊ณผ ๊ฐ™์ด ๋‚˜์—ด๋ฉ๋‹ˆ๋‹ค.
gcr.io/google_containers/kube-apiserver-amd64:v1.9.2
gcr.io/google_containers/kube-controller-manager-amd64:v1.9.2
gcr.io/google_containers/kube-scheduler-amd64:v1.9.2
gcr.io/google_containers/kube-proxy-amd64:v1.9.2
gcr.io/google_containers/etcd-amd64:3.2.14
gcr.io/google_containers/pause-amd64:3.1
gcr.io/google_containers/kube-dnsmasq-amd64:1.4.1
gcr.io/google_containers/kubernetes-dashboard-amd64:v1.8.2
gcr.io/google_containers/kubedns-amd64:1.9
gcr.io/google_containers/kube-discovery-amd64:1.0
gcr.io/google_containers/exechealthz-amd64:v1.2.0
gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.8
gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.8
gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.8
gcr.io/google_containers/dnsmasq-metrics-amd64:1.0.1

๋ฌด์Šจ ์ผ์ด ์ผ์–ด๋‚  ๊ฒƒ์ด๋ผ๊ณ  ์˜ˆ์ƒํ–ˆ์Šต๋‹ˆ๊นŒ?

kubeadm ์ดˆ๊ธฐํ™”๊ฐ€ ์™„๋ฃŒ๋˜์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

์žฌํ˜„ํ•˜๋Š” ๋ฐฉ๋ฒ•(๊ฐ€๋Šฅํ•œ ํ•œ ์ตœ์†Œํ•œ์œผ๋กœ ์ •ํ™•ํ•˜๊ฒŒ)?

Ubuntu 16.04 ๋ฐ kubeadm 1.9.2๊ฐ€ ์žˆ๋Š” virtualbox

์šฐ๋ฆฌ๊ฐ€ ์•Œ์•„์•ผ ํ•  ๋‹ค๋ฅธ ๊ฒƒ์ด ์žˆ์Šต๋‹ˆ๊นŒ?

areUX lifecyclactive prioritimportant-soon

๊ฐ€์žฅ ์œ ์šฉํ•œ ๋Œ“๊ธ€

https://github.com/kubernetes/kubernetes/issues/59680#issuecomment -364646304
selinux ๋น„ํ™œ์„ฑํ™”๊ฐ€ ๋„์›€์ด๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

๋ชจ๋“  67 ๋Œ“๊ธ€

์œ„์— ๋‚˜์—ด๋œ ์ด๋Ÿฌํ•œ ๋„์ปค ์ด๋ฏธ์ง€๋Š” "kubeadm init --kubernetes-version v1.9.2"๋ฅผ ์‹คํ–‰ํ•˜๊ธฐ ์ „์— ๋‚ด ๊ฐœ์ธ ์ €์žฅ์†Œ์—์„œ ๊ฐ€์ ธ์™”์Šต๋‹ˆ๋‹ค. GFW๋กœ ์ธํ•ด gcr.io/google-containers์— ์ง์ ‘ ์•ก์„ธ์Šคํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.

์—ฌ๊ธฐ์„œ๋„ ๊ฐ™์€ ๋ฌธ์ œ!

CentOS 7์—์„œ ๋™์ผํ•œ ๋ฌธ์ œ๊ฐ€ ์žˆ์Šต๋‹ˆ๋‹ค.

+1

+1

+1

+1
vultr์˜ ์„œ๋ฒ„๋„ ์—ฌ๊ธฐ์— ๋ถ™์–ด ์žˆ์Šต๋‹ˆ๋‹ค.

+1

+1

+1

ํ•ด๊ฒฐ ๋ฐฉ๋ฒ•์œผ๋กœ

1/ ์ฟ ๋ฒ„๋„คํ‹ฐ์Šค ๋งˆ์Šคํ„ฐ์— ๋„์ปค ๋ ˆ์ง€์ŠคํŠธ๋ฆฌ ์ƒ์„ฑ

2/ /etc/hosts์—์„œ kubernetes ๋งˆ์Šคํ„ฐ๋ฅผ gcr.io๋กœ ์„ ์–ธํ•ฉ๋‹ˆ๋‹ค.

3/ ์ธํ„ฐ๋„ท์— ์—ฐ๊ฒฐ๋œ ์ปดํ“จํ„ฐ์—์„œ ggogle ํด๋ผ์šฐ๋“œ์— ๋กœ๊ทธ์˜จํ•˜๊ณ  ์ด๋ฏธ์ง€๋ฅผ ๋‹ค์šด๋กœ๋“œํ•ฉ๋‹ˆ๋‹ค.
์˜ˆ:
gloud docker -- pull gcrio/goole_container/pause-amd64:3.0
gloud docker -- save -o /tmp/pause-amd.tar gcrio/goole_container/pause-amd64:3.0

4/ docker repo ๋ ˆ์ง€์ŠคํŠธ๋ฆฌ์— ์ด๋ฏธ์ง€ ์—…๋กœ๋“œ
๋„์ปค ๋กœ๋“œ -i /tmp/pause-amd64.tar
๋„์ปค ํƒœ๊ทธ gcr.io/Google_containers/pause-amd64:3.0 yourdoke ๋“ฑ๋ก:pause-amd64 :3.0
docker push yourdoke ๋ ˆ์ง€์ŠคํŠธ๋ฆฌ:pause-amd64 :3.0

5/ kebernetes ๋งˆ์Šคํ„ฐ์—์„œ gcr.io ๋„์ปค ๋ ˆ์ง€์ŠคํŠธ๋ฆฌ๋กœ

๋„์ปค ๋ ˆ์ง€์ŠคํŠธ๋ฆฌ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์—์„œ ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ
docker pull yourdocke rregistry:pause-amd64 :3.0

๋กœ์ปฌ gcr.io ๋„์ปค ๋ ˆ์ง€์ŠคํŠธ๋ฆฌ๋กœ ๊ฐ€์ ธ์˜ค๊ธฐ
๋„์ปค ํƒœ๊ทธ yourdocke rregistry:pause-amd64 :3.0 gcr.io/google_containers/pause-amd64:3.0
๋„์ปค ํ‘ธ์‹œ gcr.io/google_containers/pause-amd64:3.0

kubeadm init ์—์„œ ์‚ฌ์šฉํ•˜๋Š” ๋ชจ๋“  ์ด๋ฏธ์ง€๋ฅผ ๋‹ค์šด๋กœ๋“œํ•˜์‹ญ์‹œ์˜ค. /etc/kubernetes/manifest/*.yaml์„ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค.

1.9.3์—์„œ ์ˆ˜์ •๋˜์—ˆ๋‚˜์š”?

+1

+1 - kubeadm init๋ฅผ ๋‘ ๋ฒˆ์งธ ์‹คํ–‰ํ•  ๋•Œ๋งŒ ๋‚˜ํƒ€๋‚ฉ๋‹ˆ๋‹ค. ์ฒ˜์Œ์€ ๊ทธ๋ƒฅ ์ž˜ ๋„˜์–ด๊ฐ‘๋‹ˆ๋‹ค. kubeadm reset์œผ๋กœ ์ œ๋Œ€๋กœ ์ •๋ฆฌ๋˜์ง€ ์•Š์€ ์ฒซ ๋ฒˆ์งธ ์‹คํ–‰์—์„œ ์•ฝ๊ฐ„์˜ ์ƒํƒœ๊ฐ€ ์žˆ๋Š”์ง€ ํ™•์‹คํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

+1

centos 7 ๋ฐ /etc/env์— ํ”„๋ก์‹œ๋ฅผ ์„ค์ •ํ•œ ๋‹ค์Œ ๐Ÿ‘Ž๋กœ ํ‘œ์‹œํ•ฉ๋‹ˆ๋‹ค.

+1

๋™์ผํ•œ ๋ฌธ์ œ๊ฐ€ ์žˆ์Šต๋‹ˆ๋‹ค. Centos7, ์ตœ์‹  kube ์„ค์น˜(1.9.3), hightower ๋ฌธ์„œ ๋ฐ ๋ชจ๋“  kubernetes ๋ฌธ์„œ๋ฅผ ์‹œ๋„ํ–ˆ์Šต๋‹ˆ๋‹ค. etcd์™€ flannel์€ ์ž‘๋™ํ•˜๊ณ  ์‚ด์•„์žˆ์Šต๋‹ˆ๋‹ค. NO_PROXY ํ™˜๊ฒฝ ๋ณ€์ˆ˜๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋‹ค๋ฅธ ์—ฐ๊ฒฐ์— ๋Œ€ํ•œ ํ”„๋ก์‹œ ์—ฐ๊ฒฐ์„ ์‹œ๋„ํ•˜์ง€ ์•Š๋„๋ก ์™ธ๋ถ€ IP๋ฅผ ์ž…๋ ฅํ•˜์ง€๋งŒ ์‹ค์ œ๋กœ๋Š” ํ•ด๋‹น ์ง€์ ์— ๋„๋‹ฌํ•˜์ง€ ์•Š๊ณ  ์œ„์˜ ๋‹ค๋ฅธ ๋ชจ๋“  ์‚ฌ๋žŒ๊ณผ ๋™์ผํ•œ ์˜ค๋ฅ˜๊ฐ€ ๋ฐœ์ƒํ•ฉ๋‹ˆ๋‹ค.

+1

๋™์ผํ•œ ๋ฌธ์ œ๊ฐ€ ์žˆ์Šต๋‹ˆ๋‹ค. centos 7, kubelet v1.9.3;
ํ•˜์ง€๋งŒ ์ด๋ฏธ์ง€๊ฐ€ ์„ฑ๊ณต์ ์œผ๋กœ ๋‹ค์šด๋กœ๋“œ ๋œ ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค.
docker images
gcr.io/google_containers/kube-apiserver-amd64 v1.9.3 360d55f91cbf 4 weeks ago 210.5 MB gcr.io/google_containers/kube-controller-manager-amd64 v1.9.3 83dbda6ee810 4 weeks ago 137.8 MB gcr.io/google_containers/kube-scheduler-amd64 v1.9.3 d3534b539b76 4 weeks ago 62.71 MB gcr.io/google_containers/etcd-amd64 3.1.11 59d36f27cceb 3 months ago 193.9 MB gcr.io/google_containers/pause-amd64 3.0 99e59f495ffa 22 months ago 746.9 kB

์—ฌ๊ธฐ์— CentOS 7 vm์ด ์žˆ๊ณ  ์ด๋ฏธ ํ”„๋ก์‹œ ์„œ๋ฒ„๋กœ ๊ตฌ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
๋‚˜๋Š” ๊ฐ™์€ ์‹œ๊ฐ„ ์ดˆ๊ณผ ๋ฉ”์‹œ์ง€๋ฅผ ๋ฐ›์•˜์ง€๋งŒ ๋„์ปค ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€ ์‹คํ–‰ ์ค‘์ž…๋‹ˆ๋‹ค.

์ €๋„ ๊ฐ™์€ ๋ฌธ์ œ๋ฅผ ๊ฒช๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ์ž์„ธํ•œ ๋‚ด์šฉ์€ ์ถœ๋ ฅ ๋ฐ ๋กœ๊ทธ๋ฅผ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค.

```[ root@kube01 ~]# kubeadm ์ดˆ๊ธฐํ™”
[์ดˆ๊ธฐํ™”] Kubernetes ๋ฒ„์ „ ์‚ฌ์šฉ: v1.9.3
[์ดˆ๊ธฐํ™”] ๊ถŒํ•œ ๋ถ€์—ฌ ๋ชจ๋“œ ์‚ฌ์šฉ: [๋…ธ๋“œ RBAC]
[์‹คํ–‰ ์ „] ์‹คํ–‰ ์ „ ๊ฒ€์‚ฌ๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  ํ˜ธ์ŠคํŠธ ์ด๋ฆ„]: ํ˜ธ์ŠคํŠธ ์ด๋ฆ„ "kube01"์— ์—ฐ๊ฒฐํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  ํ˜ธ์ŠคํŠธ ์ด๋ฆ„]: ํ˜ธ์ŠคํŠธ ์ด๋ฆ„ "kube01" ์กฐํšŒ kube01 on 10.10.0.81:53: ์„œ๋ฒ„ ์˜ค์ž‘๋™
[๊ฒฝ๊ณ  FileExisting-crictl]: ์‹œ์Šคํ…œ ๊ฒฝ๋กœ์—์„œ crictl์„ ์ฐพ์„ ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ] kubelet ์„œ๋น„์Šค ์‹œ์ž‘
[์ธ์ฆ์„œ] CA ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ apiserver ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] apiserver ์„œ๋น™ ์ธ์ฆ์„œ๋Š” DNS ์ด๋ฆ„ [kube01 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] ๋ฐ IP [10.96.0.1 10.25.123.11]์— ๋Œ€ํ•ด ์„œ๋ช…๋˜์—ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] apiserver-kubelet-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] sa ํ‚ค์™€ ๊ณต๊ฐœ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ front-proxy-ca ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ ํ”„๋ŸฐํŠธ ํ”„๋ก์‹œ ํด๋ผ์ด์–ธํŠธ ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์œ ํšจํ•œ ์ธ์ฆ์„œ ๋ฐ ํ‚ค๊ฐ€ ์ด์ œ "/etc/kubernetes/pki"์— ์žˆ์Šต๋‹ˆ๋‹ค.
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "admin.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "kubelet.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "controller-manager.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "scheduler.conf"
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-apiserver์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-apiserver.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-controller-manager์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-controller-manager.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ œ์–ดํŒ] ๊ตฌ์„ฑ ์š”์†Œ kube-scheduler์— ๋Œ€ํ•œ ์ •์  ํฌ๋“œ ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-scheduler.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[etcd] ๋กœ์ปฌ etcd ์ธ์Šคํ„ด์Šค์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/etcd.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] kubelet์ด "/etc/kubernetes/manifests" ๋””๋ ‰ํ† ๋ฆฌ์—์„œ Static Pod๋กœ ์ปจํŠธ๋กค ํ”Œ๋ ˆ์ธ์„ ๋ถ€ํŒ…ํ•˜๊ธฐ๋ฅผ ๊ธฐ๋‹ค๋ฆฝ๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] ์ œ์–ด ํ‰๋ฉด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€์•ผ ํ•˜๋Š” ๊ฒฝ์šฐ 1๋ถ„ ์ด์ƒ ๊ฑธ๋ฆด ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

In the meantime, while watching `docker ps` this is what I see:
***Note:*** Don't mind the length of time that the containers have been up โ€” this is my third attempt and it's always the same.

```CONTAINER ID        IMAGE
              COMMAND                  CREATED              STATUS              PORTS               NAMES
c422b3fd67f9        gcr.io/google_containers/kube-apiserver-amd64<strong i="5">@sha256</strong>:a5382344aa373a90bc87d3baa4eda5402507e8df5b8bfbbad392c4fff715f0
43            "kube-apiserver --req"   About a minute ago   Up About a minute                       k8s_kube-apiserver_kube-apiserver-k
ube01_kube-system_3ff6faac27328cf290a026c08ae0ce75_1
4b30b98bcc24        gcr.io/google_containers/kube-controller-manager-amd64<strong i="6">@sha256</strong>:3ac295ae3e78af5c9f88164ae95097c2d7af03caddf067cb35599
769d0b7251e   "kube-controller-mana"   2 minutes ago        Up 2 minutes                            k8s_kube-controller-manager_kube-co
ntroller-manager-kube01_kube-system_d556d9b8ccdd523a5208b391ca206031_0
71c6505ed125        gcr.io/google_containers/kube-scheduler-amd64<strong i="7">@sha256</strong>:2c17e637c8e4f9202300bd5fc26bc98a7099f49559ca0a8921cf692ffd4a16
75            "kube-scheduler --add"   2 minutes ago        Up 2 minutes                            k8s_kube-scheduler_kube-scheduler-k
ube01_kube-system_6502dddc08d519eb6bbacb5131ad90d0_0
9d01e2de4686        gcr.io/google_containers/pause-amd64:3.0
              "/pause"                 3 minutes ago        Up 2 minutes                            k8s_POD_kube-controller-manager-kub
e01_kube-system_d556d9b8ccdd523a5208b391ca206031_0
7fdaabc7e2a7        gcr.io/google_containers/pause-amd64:3.0
              "/pause"                 3 minutes ago        Up 2 minutes                            k8s_POD_kube-apiserver-kube01_kube-
system_3ff6faac27328cf290a026c08ae0ce75_0
a5a2736e6cd0        gcr.io/google_containers/pause-amd64:3.0
              "/pause"                 3 minutes ago        Up 2 minutes                            k8s_POD_kube-scheduler-kube01_kube-
system_6502dddc08d519eb6bbacb5131ad90d0_0
ea82cd3a27da        gcr.io/google_containers/pause-amd64:3.0
              "/pause"                 3 minutes ago        Up 2 minutes                            k8s_POD_etcd-kube01_kube-system_727
8f85057e8bf5cb81c9f96d3b25320_0

gcr.io/google_containers/kube-apiserver-amd64@sha256:a5382344aa373a90bc87d3baa4eda5402507e8df5b8bfbbad392c4fff715f043์— ๋Œ€ํ•œ ๋กœ๊ทธ ์ถœ๋ ฅ

I0309 19:59:29.570990       1 server.go:121] Version: v1.9.3
I0309 19:59:29.756611       1 feature_gate.go:190] feature gates: map[Initializers:true]
I0309 19:59:29.756680       1 initialization.go:90] enabled Initializers feature as part of admission plugin setup
I0309 19:59:29.760396       1 master.go:225] Using reconciler: master-count
W0309 19:59:29.789648       1 genericapiserver.go:342] Skipping API batch/v2alpha1 because it has no resources.
W0309 19:59:29.796731       1 genericapiserver.go:342] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
W0309 19:59:29.797445       1 genericapiserver.go:342] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
W0309 19:59:29.804841       1 genericapiserver.go:342] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
[restful] 2018/03/09 19:59:29 log.go:33: [restful/swagger] listing is available at https://10.25.123.11:6443/swaggerapi
[restful] 2018/03/09 19:59:29 log.go:33: [restful/swagger] https://10.25.123.11:6443/swaggerui/ is mapped to folder /swagger-ui/
[restful] 2018/03/09 19:59:30 log.go:33: [restful/swagger] listing is available at https://10.25.123.11:6443/swaggerapi
[restful] 2018/03/09 19:59:30 log.go:33: [restful/swagger] https://10.25.123.11:6443/swaggerui/ is mapped to folder /swagger-ui/
I0309 19:59:32.393800       1 serve.go:89] Serving securely on [::]:6443
I0309 19:59:32.393854       1 apiservice_controller.go:112] Starting APIServiceRegistrationController
I0309 19:59:32.393866       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0309 19:59:32.393965       1 controller.go:84] Starting OpenAPI AggregationController
I0309 19:59:32.393998       1 crdregistration_controller.go:110] Starting crd-autoregister controller
I0309 19:59:32.394012       1 controller_utils.go:1019] Waiting for caches to sync for crd-autoregister controller
I0309 19:59:32.394034       1 customresource_discovery_controller.go:152] Starting DiscoveryController
I0309 19:59:32.394057       1 naming_controller.go:274] Starting NamingConditionController
I0309 19:59:32.393855       1 crd_finalizer.go:242] Starting CRDFinalizer
I0309 19:59:32.394786       1 available_controller.go:262] Starting AvailableConditionController
I0309 19:59:32.394815       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0309 20:00:06.434318       1 trace.go:76] Trace[12318713]: "Create /api/v1/nodes" (started: 2018-03-09 19:59:32.431463052 +0000 UTC m=+2.986431803) (total time: 34.002792758s):
Trace[12318713]: [4.00201898s] [4.001725343s] About to store object in database
Trace[12318713]: [34.002792758s] [30.000773778s] END
E0309 20:00:32.406206       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *core.LimitRange: the server was unable to return a response in the time allotted, but may still be processing the request (get limitranges)
E0309 20:00:32.406339       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *core.Secret: the server was unable to return a response in the time allotted, but may still be processing the request (get secrets)
E0309 20:00:32.406342       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/kube-aggregator/pkg/client/informers/internalversion/factory.go:73: Failed to list *apiregistration.APIService: the server was unable to return a response in the time allotted, but may still be processing the request (get apiservices.apiregistration.k8s.io)
E0309 20:00:32.408094       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *core.Pod: the server was unable to return a response in the time allotted, but may still be processing the request (get pods)
E0309 20:00:32.415692       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *core.PersistentVolume: the server was unable to return a response in the time allotted, but may still be processing the request (get persistentvolumes)
E0309 20:00:32.415818       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/apiextensions-apiserver/pkg/client/informers/internalversion/factory.go:73: Failed to list *apiextensions.CustomResourceDefinition: the server was unable to return a response in the time allotted, but may still be processing the request (get customresourcedefinitions.apiextensions.k8s.io)
E0309 20:00:32.415862       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *rbac.ClusterRoleBinding: the server was unable to return a response in the time allotted, but may still be processing the request (get clusterrolebindings.rbac.authorization.k8s.io)
E0309 20:00:32.415946       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Namespace: the server was unable to return a response in the time allotted, but may still be processing the request (get namespaces)
E0309 20:00:32.416029       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *core.ResourceQuota: the server was unable to return a response in the time allotted, but may still be processing the request (get resourcequotas)
E0309 20:00:32.416609       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *rbac.ClusterRole: the server was unable to return a response in the time allotted, but may still be processing the request (get clusterroles.rbac.authorization.k8s.io)
E0309 20:00:32.416684       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *rbac.RoleBinding: the server was unable to return a response in the time allotted, but may still be processing the request (get rolebindings.rbac.authorization.k8s.io)
E0309 20:00:32.420305       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Endpoints: the server was unable to return a response in the time allotted, but may still be processing the request (get endpoints)
E0309 20:00:32.440196       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *storage.StorageClass: the server was unable to return a response in the time allotted, but may still be processing the request (get storageclasses.storage.k8s.io)
E0309 20:00:32.440403       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: the server was unable to return a response in the time allotted, but may still be processing the request (get services)
E0309 20:00:32.448018       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *core.ServiceAccount: the server was unable to return a response in the time allotted, but may still be processing the request (get serviceaccounts)
E0309 20:00:32.448376       1 reflector.go:205] k8s.io/kubernetes/pkg/client/informers/informers_generated/internalversion/factory.go:85: Failed to list *rbac.Role: the server was unable to return a response in the time allotted, but may still be processing the request (get roles.rbac.authorization.k8s.io)
E0309 20:00:33.395988       1 storage_rbac.go:175] unable to initialize clusterroles: the server was unable to return a response in the time allotted, but may still be processing the request (get clusterroles.rbac.authorization.k8s.io)
I0309 20:00:43.455564       1 trace.go:76] Trace[375160879]: "Create /api/v1/nodes" (started: 2018-03-09 20:00:13.454506587 +0000 UTC m=+44.009475397) (total time: 30.001008377s):
Trace[375160879]: [30.001008377s] [30.000778516s] END

==================================================== =====================

๋กœ๊ทธ ์ถœ๋ ฅ

I0309 19:51:35.248083       1 controllermanager.go:108] Version: v1.9.3
I0309 19:51:35.257251       1 leaderelection.go:174] attempting to acquire leader lease...
E0309 19:51:38.310839       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:51:41.766358       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:51:46.025824       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:51:49.622916       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:51:52.675648       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:51:55.697734       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:51:59.348765       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:01.508487       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:03.886473       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:06.120356       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:08.844772       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:12.083789       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:16.038882       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:18.555388       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:21.471034       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:24.236724       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:27.363968       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:30.045776       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:32.751626       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:36.383923       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:38.910958       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:41.400748       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:44.268909       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:47.640891       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:51.713420       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:54.419154       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:52:57.134430       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:00.942903       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:03.440586       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:07.518362       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:53:12.968927       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:16.228760       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:18.299005       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:20.681915       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:24.141874       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:28.484775       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:30.678092       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:34.107654       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:36.251647       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:39.914756       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:42.641017       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:45.058876       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:48.359511       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:51.667554       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:54.338101       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:53:57.357894       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:00.633504       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:03.244353       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:05.923510       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:09.817627       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:12.688349       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:16.803954       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:19.519269       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:23.668226       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:25.903217       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:30.248639       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:32.428029       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:34.962675       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:38.598370       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:41.179039       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:43.927574       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:54:48.190961       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:51.974141       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:55.898687       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:54:59.653210       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:02.094737       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:05.125275       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:09.280324       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:12.920886       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:17.272605       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:21.488182       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:23.708198       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:26.893696       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:31.121014       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:35.414628       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:38.252001       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:41.912479       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:45.621133       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:48.976244       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:52.537317       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:55.863737       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:55:59.682009       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:02.653432       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:04.968939       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:09.336478       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:56:13.488850       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:56:16.262967       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:56:22.685928       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:26.235497       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:28.442915       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:32.051827       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:35.547277       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:38.437120       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:41.007877       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:44.295081       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:46.746424       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:49.321870       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:52.831866       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:55.138333       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:56:57.815491       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:00.802112       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:03.848363       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:07.350593       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:10.672982       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:14.171660       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:17.923995       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:21.919624       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:23.923165       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:27.692006       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:30.654447       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:33.851703       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:57:37.302382       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:40.286552       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:42.358940       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:44.364982       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:46.372569       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:50.571683       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:53.988093       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:57:57.648006       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:01.607961       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:05.717138       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:08.819600       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:12.262314       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:14.327626       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:18.359683       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:20.961212       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:24.503457       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:27.099581       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:29.518623       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:32.943210       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:36.900236       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:40.567479       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:42.642410       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:45.938839       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:50.282483       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:54.086558       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:58:56.794469       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:00.604370       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:02.968978       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:05.825551       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:09.824458       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:12.383249       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:15.891164       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:59:19.088375       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:59:21.305063       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:59:23.366258       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:59:26.308481       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: Get https://10.25.123.11:6443/api/v1/namespaces/kube-system/endpoints/kube-controller-manager: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:59:32.440045       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:36.673744       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:40.049109       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:43.463730       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:46.454431       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:49.782639       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:52.964468       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 19:59:57.265527       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:01.181219       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:03.441468       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:07.324053       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:10.269835       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:12.584906       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:15.042928       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:18.820764       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:22.392476       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:24.630702       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:27.881904       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:30.123513       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:32.490088       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:34.675420       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:37.433904       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:39.819475       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"
E0309 20:00:42.152164       1 leaderelection.go:224] error retrieving resource lock kube-system/kube-controller-manager: endpoints "kube-controller-manager" is forbidden: User "system:kube-controller-manager" cannot get endpoints in the namespace "kube-system"

==================================================== =====================

๋กœ๊ทธ ์ถœ๋ ฅ

W0309 19:51:34.800737       1 server.go:159] WARNING: all flags than --config are deprecated. Please begin using a config file ASAP.
I0309 19:51:34.812848       1 server.go:551] Version: v1.9.3
I0309 19:51:34.817093       1 server.go:570] starting healthz server on 127.0.0.1:10251
E0309 19:51:34.818028       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: Get https://10.25.123.11:6443/apis/policy/v1beta1/poddisruptionbudgets?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.818279       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: Get https://10.25.123.11:6443/api/v1/pods?fieldSelector=spec.schedulerName%3Ddefault-scheduler%2Cstatus.phase%21%3DFailed%2Cstatus.phase%21%3DSucceeded&limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.818346       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: Get https://10.25.123.11:6443/api/v1/persistentvolumeclaims?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.818408       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: Get https://10.25.123.11:6443/apis/apps/v1beta1/statefulsets?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.819028       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: Get https://10.25.123.11:6443/api/v1/services?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.819386       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: Get https://10.25.123.11:6443/api/v1/nodes?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.820217       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: Get https://10.25.123.11:6443/apis/extensions/v1beta1/replicasets?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.820659       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: Get https://10.25.123.11:6443/api/v1/persistentvolumes?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:34.821783       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: Get https://10.25.123.11:6443/api/v1/replicationcontrollers?limit=500&resourceVersion=0: dial tcp 10.25.123.11:6443: getsockopt: connection refused
E0309 19:51:38.320455       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:38.329101       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:38.329733       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:38.332670       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:38.332707       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:38.332734       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:38.334248       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:38.334568       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:38.334594       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:39.322884       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:39.331726       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:39.333093       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:39.335939       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:39.335988       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:39.336229       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:39.336514       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:39.337881       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:39.338784       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:40.323869       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:40.332910       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:40.334120       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:40.337188       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:40.338218       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:40.339267       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:40.340635       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:40.342035       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:40.343070       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:41.325987       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:41.334782       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:41.336320       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:41.338996       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:41.339923       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:41.340904       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:41.342304       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:41.343675       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:41.344622       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:42.328038       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:42.336744       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:42.338239       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:42.340719       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:42.341878       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:42.342835       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:42.344100       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:42.345231       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:42.346405       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:43.330230       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:43.338706       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:43.339941       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:43.342476       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:43.343584       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:43.344615       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:43.345792       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:43.346976       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:43.348050       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:44.332307       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:44.340659       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:44.341607       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:44.344223       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:44.345380       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:44.346247       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope
E0309 19:51:44.347536       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolume: persistentvolumes is forbidden: User "system:kube-scheduler" cannot list persistentvolumes at the cluster scope
E0309 19:51:44.348664       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.StatefulSet: statefulsets.apps is forbidden: User "system:kube-scheduler" cannot list statefulsets.apps at the cluster scope
E0309 19:51:44.349648       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: services is forbidden: User "system:kube-scheduler" cannot list services at the cluster scope
E0309 19:51:45.334228       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.PodDisruptionBudget: poddisruptionbudgets.policy is forbidden: User "system:kube-scheduler" cannot list poddisruptionbudgets.policy at the cluster scope
E0309 19:51:45.342638       1 reflector.go:205] k8s.io/kubernetes/plugin/cmd/kube-scheduler/app/server.go:590: Failed to list *v1.Pod: pods is forbidden: User "system:kube-scheduler" cannot list pods at the cluster scope
E0309 19:51:45.343460       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.ReplicationController: replicationcontrollers is forbidden: User "system:kube-scheduler" cannot list replicationcontrollers at the cluster scope
E0309 19:51:45.345969       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1beta1.ReplicaSet: replicasets.extensions is forbidden: User "system:kube-scheduler" cannot list replicasets.extensions at the cluster scope
E0309 19:51:45.347140       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Node: nodes is forbidden: User "system:kube-scheduler" cannot list nodes at the cluster scope
E0309 19:51:45.348176       1 reflector.go:205] k8s.io/kubernetes/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.PersistentVolumeClaim: persistentvolumeclaims is forbidden: User "system:kube-scheduler" cannot list persistentvolumeclaims at the cluster scope

==================================================== =====================

gcr.io/google_containers/pause-amd64:3.0์— ๋Œ€ํ•œ ๋กœ๊ทธ ์ถœ๋ ฅ

==================================================== =====================

gcr.io/google_containers/pause-amd64:3.0์— ๋Œ€ํ•œ ๋กœ๊ทธ ์ถœ๋ ฅ

==================================================== =====================

gcr.io/google_containers/pause-amd64:3.0์— ๋Œ€ํ•œ ๋กœ๊ทธ ์ถœ๋ ฅ

==================================================== =====================

gcr.io/google_containers/pause-amd64:3.0์— ๋Œ€ํ•œ ๋กœ๊ทธ ์ถœ๋ ฅ

==================================================== =====================

+1
์—…๋ฐ์ดํŠธ:
๋‚ด๊ฐ€ ํ•  ์ˆ˜ ์žˆ๋Š” ๋ชจ๋“  ๊ฒƒ์„ ์‚ดํŽด๋ณธ ํ›„(์ €๋Š” k8s๋ฅผ ์ฒ˜์Œ ์ ‘ํ–ˆ์Šต๋‹ˆ๋‹ค) ๋งˆ์นจ๋‚ด kubectl describe pod -n kube-system kube-dns-<sha> ์—์„œ ๋‚ด๊ฐ€ ์„ค์น˜ํ•˜๊ณ  ์žˆ๋˜ ๊ฐ€์ƒ ์„œ๋ฒ„์— CPU๊ฐ€ 1๊ฐœ๋งŒ ์žˆ๊ณ  kube-dns๊ฐ€ ์‹œ์ž‘๋˜์ง€ ์•Š๋Š”๋‹ค๋Š” ๊ฒƒ์„ ์•Œ์•˜์Šต๋‹ˆ๋‹ค. CPU๊ฐ€ ๋ถ€์กฑํ•˜๊ธฐ ๋•Œ๋ฌธ์ž…๋‹ˆ๋‹ค. ์ด์ƒํ•˜๊ฒŒ๋„ kubectl logs pod -n kube-system kube-dns-<sha> ๋Š” ์ด ์ •๋ณด๋ฅผ ํ‘œ์‹œํ•˜์ง€ ์•Š์•˜์Šต๋‹ˆ๋‹ค.

OS ์žฌ์„ค์น˜ ํ›„ ์ž‘๋™ํ–ˆ์Šต๋‹ˆ๋‹ค(kubeadm ์„ค์น˜ ํ›„ ์žฌ๋ถ€ํŒ…ํ•˜๋ฉด k8s ๋งˆ์Šคํ„ฐ๊ฐ€ ์ œ๋Œ€๋กœ ์‹œ์ž‘๋˜์ง€ ์•Š์Œ).
(์ถœ๋ ฅ์„ ์บก์ฒ˜ํ•˜๋Š” ๊ฒƒ์„ ์žŠ์–ด ์ฃ„์†กํ•ฉ๋‹ˆ๋‹ค)

+1

๋‚˜๋Š” ๊ฐ™์€ ๋ฌธ์ œ๊ฐ€ ์žˆ์—ˆ๊ณ  ์ทจ์†Œํ•˜๊ณ  reset ๋ฅผ ์‹คํ–‰ํ•œ ๋‹ค์Œ ์ด์ „๊ณผ ๋™์ผํ•œ init ๋ฅผ ์‹คํ–‰ํ–ˆ์ง€๋งŒ --apiserver-advertise-address=<my_host_public_ip_address> -- ์ž‘๋™ํ–ˆ์Šต๋‹ˆ๋‹ค.

https://github.com/kubernetes/kubernetes/issues/59680#issuecomment -364646304
selinux ๋น„ํ™œ์„ฑํ™”๊ฐ€ ๋„์›€์ด๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

1.8.10์œผ๋กœ ๋‹ค์šด ๊ทธ๋ ˆ์ด๋“œํ•˜๋ฉด ๋ฌธ์ œ๊ฐ€ ํ•ด๊ฒฐ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

+1

+1

Ubuntu 16.04์˜ v1.9.3๊ณผ ๋™์ผํ•œ ๋ฌธ์ œ(selinux ์—†์Œ)

+1 ๊ฐ™์€ ๋ฌธ์ œ

arm64์˜ Ubuntu 16.04์— ์žˆ๋Š” v1.10๊ณผ ๋™์ผํ•œ ๋ฌธ์ œ์ž…๋‹ˆ๋‹ค.

arm64์˜ ์šฐ๋ถ„ํˆฌ 16.04์˜ v1.10๊ณผ ๋™์ผํ•œ ๋ฌธ์ œ(selinux ์—†์Œ)

์„ค์น˜ํ•œ ํ•˜๋“œ์›จ์–ด์— ์žˆ๋Š” CPU ์ˆ˜๋ฅผ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค. 3์ฃผ ์ „์— ์œ„์—์„œ ์„ค๋ช…ํ•œ ๋Œ€๋กœ ์„ค์น˜ํ•˜๋ ค๋ฉด ๋งˆ์Šคํ„ฐ์— 2๊ฐœ๊ฐ€ ํ•„์š”ํ•ฉ๋‹ˆ๋‹ค.

@bbruun ์‚ฌ์šฉ๋œ ํ•˜๋“œ์›จ์–ด๋Š” https://www.pine64.org/?page_id=1491 ์ด๋ฏ€๋กœ 4๊ฐœ์˜ ์ฝ”์–ด๋กœ ์ œ๋Œ€๋กœ ๊ฐ์ง€๋ฉ๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋ฉด ํ•˜๋“œ์›จ์–ด๊ฐ€ ๋ฌธ์ œ๊ฐ€ ๋˜์–ด์„œ๋Š” ์•ˆ ๋ฉ๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋‚˜ ์–ด์จŒ๋“  ํŒ์„ ์ฃผ์…”์„œ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค. @qxing3 ์€ ๋™์ผํ•œ ํ•˜๋“œ์›จ์–ด๋ฅผ ์‚ฌ์šฉํ•˜์ง€ ์•Š์„ ์ˆ˜๋„ ์žˆ์ง€๋งŒ...

@farfeduc ๊ทธ๊ฒƒ์€ ๋‚ด๊ฐ€ ๋ถ€๋”ชํžŒ ์žฅ์• ๋ฌผ์ด์—ˆ์Šต๋‹ˆ๋‹ค. ์„ค์น˜๋ฅผ ํ…Œ์ŠคํŠธํ•˜๊ณ  k8์„ ์•Œ๊ธฐ ์œ„ํ•ด ๊ฐ€์ƒ ๋จธ์‹ ์„ ๋‹ค์‹œ ์„ค์น˜ํ•˜๋ฉด์„œ ์—ฌ๋Ÿฌ ๋ฒˆ ์—ฐ์† ์‹œ๋„ํ–ˆ์ง€๋งŒ ์‹œ์Šคํ…œ์—์„œ ์‚ฌ์šฉ ๊ฐ€๋Šฅํ•œ ๋กœ๊ทธ๋ฅผ ๊ฐ€์ ธ์˜ค๋Š” ๊ฒƒ์€ ์—‰๋šฑํ•œ ์ผ์ด๋ฉฐ ๊ฐ€๋Šฅํ•œ ๋ชจ๋“  ๊ณณ์—์„œ ๊ฐ€์ ธ์˜ค๋ ค๊ณ  ํ–ˆ์Šต๋‹ˆ๋‹ค. ์‚ฌ์šฉ ๊ฐ€๋Šฅํ•œ CPU๊ฐ€ ์ถฉ๋ถ„ํ•˜์ง€ ์•Š๋‹ค๋Š” ๋ฉ”์‹œ์ง€๊ฐ€ ๋‚˜ํƒ€๋‚  ๋•Œ๊นŒ์ง€. ์ด์ œ 3๊ฐœ์˜ Udoo x86 Ultra๋ฅผ ๊ตฌ์ž…ํ•˜์—ฌ ์ง‘์—์„œ ์•ฝ๊ฐ„ ๋” ํฐ ์ธ์Šคํ„ด์Šค๋ฅผ ์‚ฌ์šฉํ•˜๋Š” ์ž‘์—…๊ณผ ํ•จ๊ป˜ ์ž‘์€ ํด๋Ÿฌ์Šคํ„ฐ๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค :-)

@bbruun ์–ด์จŒ๋“  ํŒ ์ฃผ์…”์„œ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค. ๊ฐ€์ƒ ๋จธ์‹ ์— 2๊ฐœ์˜ CPU๋ฅผ ๊ตฌ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.

/ํ• ๋‹น @liztio

+1

+1 v1.10.0

+1 v1.10.0 ๋ฐ 1.10.1

+1

ํฅ๋ฏธ๋กญ๊ฒŒ๋„ ๋ฐฐํฌ ์œ„์น˜์— ๋”ฐ๋ผ ๋ธํƒ€๋ฅผ ์ฐพ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ๋‚˜๋Š” ๋” ํƒ๊ตฌํ•  ์‹œ๊ฐ„์„ ์ฐพ๊ธฐ๋ฅผ ํฌ๋งํ•˜์ง€๋งŒ, ์ง€๊ธˆ๊นŒ์ง€๋Š” ์ด๊ฒƒ์„ ์•Œ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. Mac/VMware Fusion์„ ์‚ฌ์šฉํ•˜๊ณ  CentOS 7 VM์„ ์‹คํ–‰ํ•˜๋ฉด kubeadm 1.8์„ ์™„์ „ํžˆ ์‚ฌ์šฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๋กœ์ปฌ์—์„œ ์ž‘๋™ํ•˜๋Š” v1.9 ๋˜๋Š” v1.10์ด ์—†์Šต๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋‚˜ Digital Ocean์—์„œ CentOS 7 ์ด๋ฏธ์ง€๋ฅผ ์‚ฌ์šฉํ•˜๋ฉด v1.8.x, v1.10.0 ๋ฐ v1.10.1์„ ์„ฑ๊ณต์ ์œผ๋กœ ์‹คํ–‰ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. v1.9๋Š” ์–ด๋–ค ์ด์œ ๋กœ "๊ทธ๋ƒฅ ์˜์กด"ํ•˜๋Š” ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค. ์ด์ œ ์Šค์œ„์น˜๋ฅผ ํŠธ๋ฆฝํ•˜๋Š” ์š”์†Œ๋ฅผ ์ฐพ๊ธฐ ์œ„ํ•ด ๋‘ ํ™˜๊ฒฝ ์‚ฌ์ด์˜ ๋ฏธ์„ธํ•œ ๋ธํƒ€๋ฅผ ํŒŒํ—ค์น˜๋Š” ๋ฌธ์ œ์ž…๋‹ˆ๋‹ค. ์ปค๋„/ํŒจ์น˜ ์ˆ˜์ค€์ด ์ผ์น˜ํ•˜๊ณ  Docker ์—”์ง„ ๋“ฑ์ด ์ผ์น˜ํ•œ๋‹ค๋Š” ๊ฒƒ์„ ์•Œ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. DO๋Š” cloud-init ํ•ญ๋ชฉ์„ ์„ค์น˜ํ•˜์ง€๋งŒ ๋‚ด ๋กœ์ปฌ VM์€ ์„ค์น˜ํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ๋ฌด์—‡์ด ๋‹ค๋ฅธ์ง€ ์•Œ์•„๋‚ด๋Š” ๊ฒƒ์€ ์‰ฝ์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ๋‚˜๋Š” ๋””์Šคํฌ ํฌ๊ธฐ๋ฅผ ๋งž์ถ”๊ธฐ ์œ„ํ•ด ๋…ธ๋ ฅํ–ˆ์Šต๋‹ˆ๋‹ค(์ž‘์€ ๋””์Šคํฌ๊ฐ€ ์–ด๋”˜๊ฐ€์— ์˜ค๋ฅ˜๋ฅผ ๊ฐ€๋ฆด ์ˆ˜ ์žˆ๋‹ค๊ณ  ์ƒ๊ฐํ•˜์ง€๋งŒ ๊ทธ๊ฒƒ๋„ ์ œ๊ฑฐํ–ˆ์Šต๋‹ˆ๋‹ค).

๋ชจ๋“  ๊ฒฝ์šฐ์— ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ๋Š” ํ•ญ์ƒ ์ž‘๋™ํ–ˆ์œผ๋ฉฐ API ์„œ๋น„์Šค๊ฐ€ ์‘๋‹ตํ•˜๋„๋ก ํ•˜๊ณ  ์‹คํŒจํ•  ๋•Œ ๋ช‡ ๋ถ„๋งˆ๋‹ค ์žฌํ™œ์šฉ์„ ์œ ์ง€ํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

์ธ์‚ฌ๋ง,

https://docs.docker.com/config/daemon/systemd/#httphttps -proxy๋ฅผ ์ฐธ์กฐํ•˜์—ฌ docker ๋ฐ๋ชฌ์— ๋Œ€ํ•œ ํ”„๋ก์‹œ๋ฅผ ์„ค์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

+1 Raspberry PI 3์˜ HypriotOS์—์„œ ์‹คํ–‰

๋งˆ์ง€๋ง‰ ๋ฒ„์ „ ๋Œ€์‹  v1.9.6์„ ์„ค์น˜ํ•˜์—ฌ ์ž‘๋™ํ•˜๊ฒŒ ๋งŒ๋“ค ์ˆ˜ ์žˆ์—ˆ์Šต๋‹ˆ๋‹ค.
๋”ฐ๋ผ์„œ v1.9.6์—์„œ๋Š” ์ •์ƒ์ ์œผ๋กœ ์ž‘๋™ํ•˜์ง€๋งŒ ์†ŒํŒŒ์ธ ๋ณด๋“œ์˜ arm64์—์„œ ์šฐ๋ถ„ํˆฌ 16.04์˜ v1.10.0 ๋ฐ v1.10.1์—์„œ๋Š” ์‹คํŒจํ•ฉ๋‹ˆ๋‹ค.

Raspberry Pi 3, HypriotOS์—์„œ๋„ ๋™์ผํ•œ ๋ฌธ์ œ๊ฐ€ ์žˆ์Šต๋‹ˆ๋‹ค. 1.9.7-00์œผ๋กœ ๋‹ค์šด ๊ทธ๋ ˆ์ด๋“œํ•˜๋Š” ๊ฒƒ๋„ ์ €์—๊ฒŒ ํšจ๊ณผ์ ์ด์—ˆ์Šต๋‹ˆ๋‹ค.

+1, kubeadm v1.10.1, ๋ผ์ฆˆ๋ฒ ๋ฆฌ ํŒŒ์ด 3b, hypriotOS

์ œ ๊ฒฝ์šฐ์—๋Š” etcd ์ปจํ…Œ์ด๋„ˆ๊ฐ€ ์‹œ์ž‘๋˜๊ณ  ์˜ค๋ฅ˜์™€ ํ•จ๊ป˜ ์ข…๋ฃŒ๋˜์—ˆ์œผ๋ฉฐ ์ด๋กœ ์ธํ•ด kubeadm init ๊ฐ€ ์ค‘๋‹จ๋˜๊ณ  ๊ฒฐ๊ตญ ์‹œ๊ฐ„์ด ์ดˆ๊ณผ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

์ด๊ฒƒ์ด ๋‹น์‹ ์„ ๋ฌผ๊ณ  ์žˆ๋Š”์ง€ ํ™•์ธํ•˜๋ ค๋ฉด docker ps -a ๋ฅผ ์‹คํ–‰ํ•˜๊ณ  etcd ์ปจํ…Œ์ด๋„ˆ์˜ ์ƒํƒœ๋ฅผ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค. ์‹คํ–‰ ์ค‘์ด ์•„๋‹ˆ๋ฉด etcd ์ปจํ…Œ์ด๋„ˆ( docker logs <container-id> )์— ๋Œ€ํ•œ ๋กœ๊ทธ๋ฅผ ํ™•์ธํ•˜๊ณ  ์ฃผ์†Œ์— ๋ฐ”์ธ๋”ฉํ•  ์ˆ˜ ์—†๋‹ค๊ณ  ๋ถˆํ‰ํ•˜๋Š”์ง€ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค. ์ด ๋ฌธ์ œ ๋ณด๊ณ ์„œ๋ฅผ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค: https://github.com/kubernetes/kubernetes/issues/57709

๋ฐฉ๊ธˆ ์–ธ๊ธ‰ํ•œ ๋ฌธ์ œ์—๋Š” ํ•ด๊ฒฐ ๋ฐฉ๋ฒ•์ด ์žˆ์ง€๋งŒ ๊ทธ๊ฒƒ์ด ๋จผ์ € ์‹คํ–‰๋˜๊ณ  ์žˆ๋Š”์ง€ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค.

๋ฐฉํ™”๋ฒฝ์ด 6443 ์— ๋Œ€ํ•œ ์ธ๋ฐ”์šด๋“œ ํŠธ๋ž˜ํ”ฝ์„ ํ—ˆ์šฉํ•˜๋Š”์ง€ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค.

์˜ˆ๋ฅผ ๋“ค์–ด Ubuntu๋ฅผ ์‚ฌ์šฉํ•˜๋Š” ๊ฒฝ์šฐ ufw status ๋ฅผ ์‹คํ–‰ํ•˜์—ฌ ํ™œ์„ฑํ™”๋˜์–ด ์žˆ๋Š”์ง€ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค.

๊ทธ๋Ÿฐ ๋‹ค์Œ ufw allow 6443 ํฌํŠธ๋ฅผ ์—ฝ๋‹ˆ๋‹ค.

์•„๋ž˜ ์ด๋ฏธ์ง€๋ฅผ ๋‚˜์—ดํ•˜๊ณ  ํ”„๋ก์‹œ๋ฅผ ํ†ตํ•ด ์ˆ˜๋™์œผ๋กœ ๊ฐ€์ ธ์˜จ ๋‹ค์Œ kubeadm์„ ๋‹ค์‹œ ์ดˆ๊ธฐํ™”ํ•˜๋Š” ๊ฒƒ์ด ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๊นŒ?
์ž‘๋™ํ• ๊นŒ์š”?
์‚ฌ์ดŒ, ์šฐ๋ฆฌ๋Š” ์ค‘๊ตญ์— ์žˆ์Šต๋‹ˆ๋‹ค, ๋‹น์‹ ์€ ์•Œ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค, GFW.
๊ทธ๋ฆฌ๊ณ  ์ €๋Š” k8์„ ์ฒ˜์Œ ์‚ฌ์šฉํ•˜๊ณ  centos7์— ์„ค์ •ํ•  ๋•Œ ์—ฌ๊ธฐ์— ๋ฉˆ์ท„์Šต๋‹ˆ๋‹ค.

GREAT FIREWALL ๋’ค์— ์žˆ๋Š” ์ค‘๊ตญ ์‚ฌ๋žŒ๋“ค์„ ์œ„ํ•ด

@thanch2n thx ๋งŽ์ด. ๋‚˜๋Š” ๊ทธ๊ฒƒ์„ ์‹œ๋„ ํ• ๊ฑฐ์•ผ.

์ด๊ฒƒ์„ ์‚ฌ์šฉํ•˜์—ฌ ํ”„๋ก์‹œ๋ฅผ docker์— ์ถ”๊ฐ€ํ–ˆ๋Š”๋ฐ ์ด๋ฏธ์ง€๊ฐ€ ๋ชจ๋‘ ์ด๋ฏธ ๋‹ค์šด๋กœ๋“œ๋œ ๊ฒƒ ๊ฐ™์ง€๋งŒ ์—ฌ์ „ํžˆ "[์ดˆ๊ธฐํ™”] ์ œ์–ด ํ‰๋ฉด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€์•ผ ํ•˜๋Š” ๊ฒฝ์šฐ 1๋ถ„ ์ด์ƒ ๊ฑธ๋ฆด ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค."

์•„๋ž˜์— ์ž๋™์œผ๋กœ ๊ฐ€์ ธ์˜จ ์ด๋ฏธ์ง€๋ฅผ ๋‚˜์—ดํ•ฉ๋‹ˆ๋‹ค.

k8s.gcr.io/kube-apiserver-amd64 v1.10.2 e774f647e259 2์ฃผ ์ „ 225MB
k8s.gcr.io/kube-scheduler-amd64 v1.10.2 0dcb3dea0db1 2์ฃผ ์ „ 50.4MB
k8s.gcr.io/kube-controller-manager-amd64 v1.10.2 f3fcd0775c4e 2์ฃผ ์ „ 148MB
k8s.gcr.io/etcd-amd64 3.1.12 52920ad46f5b 2 ๊ฐœ์›” ์ „ 193 MB
k8s.gcr.io/pause-amd64 3.1 da86e6ba6ca1 4๊ฐœ์›” ์ „ 742 kB

๋‚˜๋Š” ์ด๊ฒƒ์„ ์•Œ์•„๋‚ด๊ธฐ ์œ„ํ•ด ๋งŽ์€ ์‹œ๊ฐ„์„ ๋ณด๋ƒˆ๋‹ค. ๋‚˜๋Š” ufw๋ฅผ ๋น„ํ™œ์„ฑํ™”ํ•˜๊ณ  selinux๋ฅผ ๋„๊ณ  ip ํฌ์›Œ๋”ฉ์ด ์ผœ์ ธ ์žˆ๊ณ  /proc/sys/net/bridge/bridge-nf-call-iptables๋„ 1๋กœ ์„ค์ •๋˜์–ด ์žˆ๋Š”์ง€ ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค. ์•„๋ฌด ๊ฒƒ๋„ ๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•˜์ง€ ๋ชปํ•˜๋Š” ๊ฒƒ ๊ฐ™์•˜์Šต๋‹ˆ๋‹ค.

๊ฒฐ๊ตญ ๋‹ค์šด๊ทธ๋ ˆ์ด๋“œ ํ›„ ์—…๊ทธ๋ ˆ์ด๋“œ๋ฅผ ํ•˜๊ธฐ๋กœ ํ–ˆ์Šต๋‹ˆ๋‹ค.

sudo apt-get -y --allow-downgrades install kubectl=1.5.3-00 kubelet=1.5.3-00 kubernetes-cni=0.3.0.1-07a8a2-00 ๋ฐ

curl -Lo /tmp/old-kubeadm.deb https://apt.k8s.io/pool/kubeadm_1.6.0-alpha.0.2074-a092d8e0f95f52-00_amd64_0206dba536f698b5777c7d210444a8ace18f48e045ab78687327631c6c694f42.deb

1.10์—์„œ ๋‹ค์šด ๊ทธ๋ ˆ์ด๋“œ ํ•œ ๋‹ค์Œ

sudo apt-get -y install kubectl kubelet kubernetes-cni kubeadm

Etcd๊ฐ€ ๋‹ค์‹œ ์‹œ์ž‘๋˜๊ณ  API ์„œ๋ฒ„๊ฐ€ ์‹œ๊ฐ„ ์ดˆ๊ณผ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ์ž ์‹œ ํ›„ api-server๊ฐ€ ์—ฐ๊ฒฐํ•  ์ˆ˜ ์—†๋‹ค๋Š” ๋ถˆํ‰์œผ๋กœ ๋‹ค์‹œ ์‹œ์ž‘๋ฉ๋‹ˆ๋‹ค. DEBUG ๋ ˆ๋ฒจ ๋กœ๊น…์„ ์ผค ์ˆ˜ ์žˆ๋Š” ๋ฐฉ๋ฒ•์ด ์žˆ์Šต๋‹ˆ๊นŒ? ์ด์ œ ์›์ธ์ด ๋ฌด์—‡์ธ์ง€ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค. ํ•˜์ง€๋งŒ ์ง€๊ธˆ ์ž‘๋™ํ•ฉ๋‹ˆ๋‹ค. ๋‚˜๋Š” ํ™•์‹คํžˆ ์ด๊ฒƒ์„ ์žฌํ˜„ํ•˜๊ณ  ๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•˜๊ณ  ์‹ถ์Šต๋‹ˆ๋‹ค.

๋ง‰ํžŒ ์ด์œ ๋ฅผ ์•Œ์•˜์Šต๋‹ˆ๋‹ค.
vmware์—์„œ ์‹คํ–‰ ์ค‘์ด๊ณ  1G RAM์„ ์ฐพ์•˜์Šต๋‹ˆ๋‹ค. k8s์—๋Š” ์ตœ์†Œ 2G RAM์ด ํ•„์š”ํ•ฉ๋‹ˆ๋‹ค.
์ด์— ๋Œ€ํ•œ ์•Œ๋ฆผ์„ ์ถ”๊ฐ€ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๊นŒ?

CentOS 7์—์„œ +1 kubeadm 1.10.2
4GB RAM 2CPU

6GB RAM ๋ฐ 1 VCPU๊ฐ€ ์žˆ๋Š” HyperV VM์˜ Debian Stretch(go1.9.3)์—์„œ +1 kubeadm 1.10.1...

ํด๋Ÿฌ์Šคํ„ฐ๋ฅผ ์—ฌ๋Ÿฌ ๋ฒˆ ์žฌ์ƒ์„ฑํ–ˆ์„ ๋•Œ ๊ณผ๊ฑฐ์—๋Š” ์ž˜ ์ž‘๋™ํ–ˆ์Šต๋‹ˆ๋‹ค ...

HyperV์—์„œ 2๊ฐœ์˜ VCPU๋กœ ์ „ํ™˜์„ ์‹œ๋„ํ–ˆ์ง€๋งŒ ์•„๋ฌด ๊ฒƒ๋„ ๋ณ€๊ฒฝ๋˜์ง€ ์•Š์•˜์Šต๋‹ˆ๋‹ค.

+1 !

+1. kubeadm 1.10.1, ๋ฐ๋น„์•ˆ ์ŠคํŠธ๋ ˆ์น˜. ์ด์ „์— ์ผํ•จ

Centos 7์˜ docker 1.13.1์—์„œ ์Šคํ† ๋ฆฌ์ง€ ๋“œ๋ผ์ด๋ฒ„์— ๋ฌธ์ œ๊ฐ€ ์žˆ์Œ์„ ๋ฐœ๊ฒฌํ–ˆ์Šต๋‹ˆ๋‹ค. Docker ๋กœ๊ทธ์— 'readlink /var/lib/docker/overlay2/l: ์ž˜๋ชป๋œ ์ธ์ˆ˜'๊ฐ€ ํ‘œ์‹œ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. docker 18.03.1-ce๋กœ ์ด๋™ํ•˜๋ฉด ์ด ๋ฌธ์ œ๊ฐ€ ํ•ด๊ฒฐ๋˜๊ณ  kubeadm init๊ฐ€ ๋” ์ด์ƒ ์ค‘๋‹จ๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

๋‚˜๋Š” ๊ฐ™์€ ๋ฌธ์ œ๊ฐ€ ์žˆ์—ˆ๋‹ค. etcd๊ฐ€ ๋ฆฌ๋ˆ…์Šค ๋จธ์‹ ์˜ ํ˜ธ์ŠคํŠธ ์ด๋ฆ„(somedomain.example.com)์„ ๊ฐ€์ ธ์™€์„œ DNS ์„œ๋ฒ„์—์„œ ๊ฒ€์ƒ‰ํ•˜๊ณ  ์™€์ผ๋“œ์นด๋“œ ๋„๋ฉ”์ธ(*.example.com)์— ๋Œ€ํ•œ ๋‹ต๋ณ€์„ ์ฐพ์€ ๋‹ค์Œ ๋ฐ˜ํ™˜๋œ IP ์ฃผ์†Œ ๋Œ€์‹  ๋ฐ˜ํ™˜๋œ IP ์ฃผ์†Œ์— ๋ฐ”์ธ๋”ฉ์„ ์‹œ๋„ํ•œ ๊ฒƒ์œผ๋กœ ๋‚˜ํƒ€๋‚ฌ์Šต๋‹ˆ๋‹ค. apiserver-advertise-address.

์‚ฌ์ „ ํ’€๋ง ๋ฐ ํ”ผ๋ฒ— ์‹œ๊ฐ„ ์ดˆ๊ณผ ๊ฐ์ง€์— ๋Œ€ํ•œ ์—ฌ๋Ÿฌ ์ˆ˜์ • ์‚ฌํ•ญ์ด ์žˆ์œผ๋ฏ€๋กœ ์ด ๋ฌธ์ œ๋ฅผ ์ข…๋ฃŒํ•ฉ๋‹ˆ๋‹ค.

+1

k8sadmin์ด ์ด๋ฏธ์ง€๋ฅผ ๋Œ์–ด๋‚ด๋ฆฌ๋„๋ก ํ•˜๋Š” ํ‘œ์ค€ ๋ฐฉ๋ฒ•์„ ์‹œ๋„ํ•˜๊ณ  ์—ฌ๋Ÿฌ ๋ฒˆ ์‹œ๋„ํ•œ ๋‹ค์Œ ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์˜ค๊ณ  ์žฌ์„ค์ •ํ•˜๊ณ  ์˜ค๋ฅ˜๋ฅผ ๋ฌด์‹œํ•˜๋ ค๊ณ  ํ–ˆ์ง€๋งŒ ํ•ญ์ƒ ์‹คํŒจํ–ˆ์Šต๋‹ˆ๋‹ค.

pi@master-node-001 :~ $ sudo kubeadm ๋ฆฌ์…‹
[์žฌ์„ค์ •] ๊ฒฝ๊ณ : 'kubeadm init' ๋˜๋Š” 'kubeadm join'์— ์˜ํ•ด ์ด ํ˜ธ์ŠคํŠธ์— ์ ์šฉ๋œ ๋ณ€๊ฒฝ ์‚ฌํ•ญ์€ ๋˜๋Œ๋ ค์ง‘๋‹ˆ๋‹ค.
[์‹คํ–‰ ์ „] ์‹คํ–‰ ์ „ ๊ฒ€์‚ฌ ์‹คํ–‰
[์žฌ์„ค์ •] kubelet ์„œ๋น„์Šค ์ค‘์ง€
[์žฌ์„ค์ •] "/var/lib/kubelet"์—์„œ ๋งˆ์šดํŠธ๋œ ๋””๋ ‰ํ† ๋ฆฌ ๋งˆ์šดํŠธ ํ•ด์ œ
[์žฌ์„ค์ •] ์ƒํƒœ ์ €์žฅ ๋””๋ ‰ํ† ๋ฆฌ ๋‚ด์šฉ ์‚ญ์ œ: [/var/lib/kubelet /etc/cni/net.d /var/lib/dockershim /var/run/kubernetes /var/lib/etcd]
[์žฌ์„ค์ •] ๊ตฌ์„ฑ ๋””๋ ‰ํ† ๋ฆฌ์˜ ๋‚ด์šฉ ์‚ญ์ œ: [/etc/kubernetes/manifests /etc/kubernetes/pki]
[์žฌ์„ค์ •] ํŒŒ์ผ ์‚ญ์ œ: [/etc/kubernetes/admin.conf /etc/kubernetes/kubelet.conf /etc/kubernetes/bootstrap-kubelet.conf /etc/kubernetes/controller-manager.conf /etc/kubernetes/scheduler. conf]
pi@master-node-001 :~ $ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ ํ’€
[config/images] ๊ฐ€์ ธ ์˜ค๊ธฐ k8s.gcr.io/kube-apiserver:v1.12.2
[config/images] ๊ฐ€์ ธ ์˜ค๊ธฐ k8s.gcr.io/kube-controller-manager:v1.12.2
[๊ตฌ์„ฑ/์ด๋ฏธ์ง€] ๊ฐ€์ ธ์˜ค๊ธฐ k8s.gcr.io/kube- ์Šค์ผ€์ค„๋Ÿฌ:v1.12.2
[config/images] ๊ฐ€์ ธ ์˜ค๊ธฐ k8s.gcr.io/kube-proxy:v1.12.2
[config/images] k8s.gcr.io/pause:3.1 ๊ฐ€์ ธ์˜ค๊ธฐ
[๊ตฌ์„ฑ/์ด๋ฏธ์ง€] ๊ฐ€์ ธ ์˜ค๊ธฐ k8s.gcr.io/etcd:3.2.24
[config/images] k8s.gcr.io/coredns:1.2.2 ๊ฐ€์ ธ์˜ค๊ธฐ
pi@master-node-001 :~ $ sudo kubeadm init --token-ttl=0 --ignore-preflight-errors=all
[์ดˆ๊ธฐ] Kubernetes ๋ฒ„์ „ ์‚ฌ์šฉ: v1.12.2
[์‹คํ–‰ ์ „] ์‹คํ–‰ ์ „ ๊ฒ€์‚ฌ ์‹คํ–‰
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ/์ด๋ฏธ์ง€] Kubernetes ํด๋Ÿฌ์Šคํ„ฐ ์„ค์ •์— ํ•„์š”ํ•œ ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ/์ด๋ฏธ์ง€] ์ธํ„ฐ๋„ท ์—ฐ๊ฒฐ ์†๋„์— ๋”ฐ๋ผ 1~2๋ถ„ ์ •๋„ ์†Œ์š”๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ/์ด๋ฏธ์ง€] 'kubeadm config images pull'์„ ์‚ฌ์šฉํ•˜์—ฌ ๋ฏธ๋ฆฌ ์ด ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•  ์ˆ˜๋„ ์žˆ์Šต๋‹ˆ๋‹ค.
[kubelet] "/var/lib/kubelet/kubeadm-flags.env" ํŒŒ์ผ์— ํ”Œ๋ž˜๊ทธ๊ฐ€ ์žˆ๋Š” kubelet ํ™˜๊ฒฝ ํŒŒ์ผ ์“ฐ๊ธฐ
[kubelet] "/var/lib/kubelet/config.yaml" ํŒŒ์ผ์— kubelet ๊ตฌ์„ฑ ์“ฐ๊ธฐ
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ] kubelet ์„œ๋น„์Šค ํ™œ์„ฑํ™”
[์ธ์ฆ์„œ] etcd/ca ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ apiserver-etcd-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] etcd/server ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] etcd/server ์„œ๋น™ ์ธ์ฆ์„œ๋Š” DNS ์ด๋ฆ„ [master-node-001 localhost] ๋ฐ IP [127.0.0.1 ::1]์— ๋Œ€ํ•ด ์„œ๋ช…๋˜์—ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] etcd/ํ”ผ์–ด ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] etcd/peer ์„œ๋น™ ์ธ์ฆ์„œ๋Š” DNS ์ด๋ฆ„ [master-node-001 localhost] ๋ฐ IP [192.168.0.100 127.0.0.1 ::1]์— ๋Œ€ํ•ด ์„œ๋ช…๋˜์—ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] etcd/healthcheck-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] CA ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ apiserver ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] apiserver ์„œ๋น™ ์ธ์ฆ์„œ๋Š” DNS ์ด๋ฆ„ [master-node-001 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] ๋ฐ IP [10.96.0.1 192.168.0.100]์— ๋Œ€ํ•ด ์„œ๋ช…๋˜์—ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] apiserver-kubelet-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ front-proxy-ca ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์ƒ์„ฑ๋œ ํ”„๋ŸฐํŠธ ํ”„๋ก์‹œ ํด๋ผ์ด์–ธํŠธ ์ธ์ฆ์„œ ๋ฐ ํ‚ค์ž…๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์œ ํšจํ•œ ์ธ์ฆ์„œ ๋ฐ ํ‚ค๊ฐ€ ์ด์ œ "/etc/kubernetes/pki"์— ์žˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] sa ํ‚ค์™€ ๊ณต๊ฐœ ํ‚ค๋ฅผ ์ƒ์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "/etc/kubernetes/admin.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "/etc/kubernetes/kubelet.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "/etc/kubernetes/controller-manager.conf"
[kubeconfig] ๋””์Šคํฌ์— KubeConfig ํŒŒ์ผ ์ž‘์„ฑ: "/etc/kubernetes/scheduler.conf"
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-apiserver์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-apiserver.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-controller-manager์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-controller-manager.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-scheduler์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-scheduler.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[etcd] ๋กœ์ปฌ etcd ์ธ์Šคํ„ด์Šค์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/etcd.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] kubelet์ด "/etc/kubernetes/manifests" ๋””๋ ‰ํ† ๋ฆฌ์—์„œ Static Pod๋กœ ์ œ์–ด ํ‰๋ฉด์„ ๋ถ€ํŒ…ํ•˜๊ธฐ๋ฅผ ๊ธฐ๋‹ค๋ฆฝ๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] ์ œ์–ด ํ‰๋ฉด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€์•ผ ํ•˜๋Š” ๊ฒฝ์šฐ 1๋ถ„ ์ด์ƒ ๊ฑธ๋ฆด ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

์œ ๊ฐ์Šค๋Ÿฝ๊ฒŒ๋„ ๋‹ค์Œ๊ณผ ๊ฐ™์€ ์˜ค๋ฅ˜๊ฐ€ ๋ฐœ์ƒํ–ˆ์Šต๋‹ˆ๋‹ค.
์กฐ๊ฑด์„ ๊ธฐ๋‹ค๋ฆฌ๋Š” ์‹œ๊ฐ„์ด ์ดˆ๊ณผ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

์ด ์˜ค๋ฅ˜๋Š” ๋‹ค์Œ์œผ๋กœ ์ธํ•ด ๋ฐœ์ƒํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
- kubelet์ด ์‹คํ–‰๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.
- ์–ด๋–ค ์‹์œผ๋กœ๋“  ๋…ธ๋“œ์˜ ์ž˜๋ชป๋œ ๊ตฌ์„ฑ์œผ๋กœ ์ธํ•ด kubelet์ด ๋น„์ •์ƒ์ž…๋‹ˆ๋‹ค(ํ•„์š”ํ•œ cgroups ๋น„ํ™œ์„ฑํ™”๋จ).

์‹œ์Šคํ…œ ์ „์› ๊ณต๊ธ‰ ์‹œ์Šคํ…œ์„ ์‚ฌ์šฉํ•˜๋Š” ๊ฒฝ์šฐ ๋‹ค์Œ ๋ช…๋ น์„ ์‚ฌ์šฉํ•˜์—ฌ ์˜ค๋ฅ˜ ๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
- 'systemctl ์ƒํƒœ kubelet'
- 'journalctl -xeu kubelet'

๋˜ํ•œ ์ปจํ…Œ์ด๋„ˆ ๋Ÿฐํƒ€์ž„์—์„œ ์‹œ์ž‘ํ•  ๋•Œ ์ปจํŠธ๋กค ํ”Œ๋ ˆ์ธ ๊ตฌ์„ฑ ์š”์†Œ๊ฐ€ ์ถฉ๋Œํ•˜๊ฑฐ๋‚˜ ์ข…๋ฃŒ๋˜์—ˆ์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•˜๋ ค๋ฉด ์„ ํ˜ธํ•˜๋Š” ์ปจํ…Œ์ด๋„ˆ ๋Ÿฐํƒ€์ž„ CLI(์˜ˆ: docker)๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋ชจ๋“  ์ปจํ…Œ์ด๋„ˆ๋ฅผ ๋‚˜์—ดํ•˜์‹ญ์‹œ์˜ค.
๋‹ค์Œ์€ ๋„์ปค์—์„œ ์‹คํ–‰๋˜๋Š” ๋ชจ๋“  Kubernetes ์ปจํ…Œ์ด๋„ˆ๋ฅผ ๋‚˜์—ดํ•˜๋Š” ๋ฐฉ๋ฒ•์˜ ํ•œ ์˜ˆ์ž…๋‹ˆ๋‹ค.
- '๋„์ปค PS -a | ๊ทธ๋ ™ ํ๋ธŒ | grep -v ์ผ์‹œ ์ค‘์ง€'
์‹คํŒจํ•œ ์ปจํ…Œ์ด๋„ˆ๋ฅผ ์ฐพ์œผ๋ฉด ๋‹ค์Œ์„ ์‚ฌ์šฉํ•˜์—ฌ ๋กœ๊ทธ๋ฅผ ๊ฒ€์‚ฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
- '๋„์ปค ๋กœ๊ทธ CONTAINERID'
Kubernetes ํด๋Ÿฌ์Šคํ„ฐ๋ฅผ ์ดˆ๊ธฐํ™”ํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.
pi@master-node-001 :~ $ ๋„์ปค ์ด๋ฏธ์ง€
์ €์žฅ์†Œ ํƒœ๊ทธ ์ด๋ฏธ์ง€ ID ์ƒ์„ฑ๋œ ํฌ๊ธฐ
k8s.gcr.io/kube-controller-manager v1.12.2 4bc6cae738d8 7์ผ ์ „ 146MB
k8s.gcr.io/kube-apiserver v1.12.2 8bfe044a05e1 7์ผ ์ „ 177MB
k8s.gcr.io/kube-scheduler v1.12.2 3abf5566fec1 7์ผ ์ „ 52MB
k8s.gcr.io/kube-proxy v1.12.2 328ef67ca54f 7์ผ ์ „ 84.5MB
k8s.gcr.io/kube-proxy v1.12.1 8c06fbe56458 3์ฃผ ์ „ 84.7MB
k8s.gcr.io/kube-controller-manager v1.12.1 5de943380295 3์ฃผ ์ „ 146MB
k8s.gcr.io/kube-scheduler v1.12.1 1fbc2e4cd378 3์ฃผ ์ „ 52MB
k8s.gcr.io/kube-apiserver v1.12.1 ab216fe6acf6 3์ฃผ ์ „ 177MB
k8s.gcr.io/etcd 3.2.24 e7a8884c8443 5์ฃผ ์ „ 222MB
k8s.gcr.io/coredns 1.2.2 ab0805b0de94 2๊ฐœ์›” ์ „ 33.4MB
k8s.gcr.io/kube-scheduler v1.11.0 0e4a34a3b0e6 4๊ฐœ์›” ์ „ 56.8MB
k8s.gcr.io/kube-controller-manager v1.11.0 55b70b420785 4 ๊ฐœ์›” ์ „ 155MB
k8s.gcr.io/etcd 3.2.18 b8df3b177be2 6 ๊ฐœ์›” ์ „ 219MB
k8s.gcr.io/pause 3.1 e11a8cbeda86 10 months ago 374kB
pi@master-node-001 :~ $ h | grep kubectl
-bash: h: ๋ช…๋ น์„ ์ฐพ์„ ์ˆ˜ ์—†์Œ
pi@master-node-001 :~ $ ํžˆ์Šคํ† ๋ฆฌ | grep kubectl
9 kubectl ํฌ๋“œ ๋ชฉ๋ก
10 kubectl ๋ชฉ๋ก ํฌ๋“œ
11 kubectl --help
12 kubectl get pod -o wide
14 kubectl get pod -o wide
32์‹œ๊ฐ„ | grep kubectl
33 ์—ญ์‚ฌ | grep kubectl
pi@master-node-001 :~ $ !12
kubectl ํฌ๋“œ ๊ฐ€์ ธ์˜ค๊ธฐ -o ์™€์ด๋“œ
์„œ๋ฒ„์— ์—ฐ๊ฒฐํ•  ์ˆ˜ ์—†์Œ: net/http: TLS ํ•ธ๋“œ์…ฐ์ดํฌ ์‹œ๊ฐ„ ์ดˆ๊ณผ
pi@master-node-001 :~ $ ํžˆ์Šคํ† ๋ฆฌ | ๊ทธ๋ ™ ์ผ์‹œ ์ค‘์ง€
17 ๋„์ปค PS -a | ๊ทธ๋ ™ ํ๋ธŒ | grep -v ์ผ์‹œ ์ค‘์ง€
35 ์—ญ์‚ฌ | ๊ทธ๋ ™ ์ผ์‹œ ์ค‘์ง€
pi@master-node-001 :~ $ !17
๋„์ปค PS -a | ๊ทธ๋ ™ ํ๋ธŒ | grep -v ์ผ์‹œ ์ค‘์ง€
41623613679e 8bfe044a05e1 "kube-apiserver --auโ€ฆ
0870760b9ea0 8bfe044a05e1 "kube-apiserver --auโ€ฆ
c60d65fab8a7 3abf5566fec1 "kube-scheduler --adโ€ฆ
26c58f6c68e9 e7a8884c8443 "etcd --advertise-clโ€ฆ" 6๋ถ„ ์ „ ์ตœ๋Œ€ 5๋ถ„ k8s_etcd_etcd-master-node-001_kube-system_d01dcc7fc79b875a52f01e26432e6745
65546081ca77 4bc6cae738d8 "kube-controller-manโ€ฆ
pi@master-node-001 :~ $ kubectl get pod -o wide
^C
pi@master-node-001 :~ $ sudo ์žฌ๋ถ€ํŒ…
192.168.0.100์— ๋Œ€ํ•œ ์—ฐ๊ฒฐ์ด ์›๊ฒฉ ํ˜ธ์ŠคํŠธ์— ์˜ํ•ด ๋‹ซํ˜”์Šต๋‹ˆ๋‹ค.
192.168.0.100์— ๋Œ€ํ•œ ์—ฐ๊ฒฐ์ด ๋‹ซํ˜”์Šต๋‹ˆ๋‹ค.
karl@karl-PL62-7RC :~$ ํ•‘ 192.168.0.100
PING 192.168.0.100(192.168.0.100) 56(84) ๋ฐ”์ดํŠธ ๋ฐ์ดํ„ฐ.
^C
--- 192.168.0.100 ํ•‘ ํ†ต๊ณ„ ---
2 ํŒจํ‚ท ์ „์†ก, 0 ์ˆ˜์‹ , 100% ํŒจํ‚ท ์†์‹ค, ์‹œ๊ฐ„ 1015ms

karl@karl-PL62-7RC :~$ ssh [email protected]
ssh_exchange_identification: ์ฝ๊ธฐ: ํ”ผ์–ด์— ์˜ํ•œ ์—ฐ๊ฒฐ ์žฌ์„ค์ •
karl@karl-PL62-7RC :~$ ssh [email protected]
[email protected] ์˜ ๋น„๋ฐ€๋ฒˆํ˜ธ:
Linux master-node-001 4.14.71-v7+ #1145 SMP Fri Sep 21 15:38:35 BST 2018 armv7l

๋ฐ๋น„์•ˆ GNU/๋ฆฌ๋ˆ…์Šค ์‹œ์Šคํ…œ์— ํฌํ•จ๋œ ํ”„๋กœ๊ทธ๋žจ์€ ๋ฌด๋ฃŒ ์†Œํ”„ํŠธ์›จ์–ด์ž…๋‹ˆ๋‹ค.
๊ฐ ํ”„๋กœ๊ทธ๋žจ์˜ ์ •ํ™•ํ•œ ๋ฐฐํฌ ์กฐ๊ฑด์€
/usr/share/doc/*/copyright์˜ ๊ฐœ๋ณ„ ํŒŒ์ผ.

๋ฐ๋น„์•ˆ GNU/๋ฆฌ๋ˆ…์Šค๋Š” ์–ด๋Š ์ •๋„๊นŒ์ง€ ๋ณด์ฆ์„ ํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.
ํ•ด๋‹น ๋ฒ•๋ฅ ์— ์˜ํ•ด ํ—ˆ์šฉ๋ฉ๋‹ˆ๋‹ค.
๋งˆ์ง€๋ง‰ ๋กœ๊ทธ์ธ: 2018๋…„ 10์›” 31์ผ ์ˆ˜์š”์ผ 21:36:13
pi@master-node-001 :~ $ kubectl get pod -o wide
์„œ๋ฒ„ 192.168.0.100:6443์— ๋Œ€ํ•œ ์—ฐ๊ฒฐ์ด ๊ฑฐ๋ถ€๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ์˜ฌ๋ฐ”๋ฅธ ํ˜ธ์ŠคํŠธ ๋˜๋Š” ํฌํŠธ๋ฅผ ์ง€์ •ํ–ˆ์Šต๋‹ˆ๊นŒ?
pi@master-node-001 :~ $ sudo kubeadm init --token-ttl=0 --ignore-preflight-errors=all
[์ดˆ๊ธฐ] Kubernetes ๋ฒ„์ „ ์‚ฌ์šฉ: v1.12.2
[์‹คํ–‰ ์ „] ์‹คํ–‰ ์ „ ๊ฒ€์‚ฌ ์‹คํ–‰
[๊ฒฝ๊ณ  FileAvailable--etc-kubernetes-manifests-kube-apiserver.yaml]: /etc/kubernetes/manifests/kube-apiserver.yaml์ด ์ด๋ฏธ ์กด์žฌํ•ฉ๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  FileAvailable--etc-kubernetes-manifests-kube-controller-manager.yaml]: /etc/kubernetes/manifests/kube-controller-manager.yaml์ด ์ด๋ฏธ ์กด์žฌํ•ฉ๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  FileAvailable--etc-kubernetes-manifests-kube-scheduler.yaml]: /etc/kubernetes/manifests/kube-scheduler.yaml์ด ์ด๋ฏธ ์กด์žฌํ•ฉ๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  FileAvailable--etc-kubernetes-manifests-etcd.yaml]: /etc/kubernetes/manifests/etcd.yaml์ด ์ด๋ฏธ ์กด์žฌํ•ฉ๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  ํฌํŠธ-10250]: ํฌํŠธ 10250์ด ์‚ฌ์šฉ ์ค‘์ž…๋‹ˆ๋‹ค.
[๊ฒฝ๊ณ  DirAvailable--var-lib-etcd]: /var/lib/etcd๊ฐ€ ๋น„์–ด ์žˆ์ง€ ์•Š์Šต๋‹ˆ๋‹ค.
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ/์ด๋ฏธ์ง€] Kubernetes ํด๋Ÿฌ์Šคํ„ฐ ์„ค์ •์— ํ•„์š”ํ•œ ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ/์ด๋ฏธ์ง€] ์ธํ„ฐ๋„ท ์—ฐ๊ฒฐ ์†๋„์— ๋”ฐ๋ผ 1~2๋ถ„ ์ •๋„ ์†Œ์š”๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ/์ด๋ฏธ์ง€] 'kubeadm config images pull'์„ ์‚ฌ์šฉํ•˜์—ฌ ๋ฏธ๋ฆฌ ์ด ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•  ์ˆ˜๋„ ์žˆ์Šต๋‹ˆ๋‹ค.
[kubelet] "/var/lib/kubelet/kubeadm-flags.env" ํŒŒ์ผ์— ํ”Œ๋ž˜๊ทธ๊ฐ€ ์žˆ๋Š” kubelet ํ™˜๊ฒฝ ํŒŒ์ผ ์“ฐ๊ธฐ
[kubelet] "/var/lib/kubelet/config.yaml" ํŒŒ์ผ์— kubelet ๊ตฌ์„ฑ ์“ฐ๊ธฐ
[ํ”„๋ฆฌํ”Œ๋ผ์ดํŠธ] kubelet ์„œ๋น„์Šค ํ™œ์„ฑํ™”
[์ธ์ฆ์„œ] ๊ธฐ์กด etcd/peer ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ๊ธฐ์กด apiserver-etcd-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค ์‚ฌ์šฉ.
[์ธ์ฆ์„œ] ๊ธฐ์กด etcd/server ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ๊ธฐ์กด etcd/healthcheck-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค ์‚ฌ์šฉ.
[์ธ์ฆ์„œ] ๊ธฐ์กด apiserver ์ธ์ฆ์„œ ๋ฐ ํ‚ค ์‚ฌ์šฉ.
[์ธ์ฆ์„œ] ๊ธฐ์กด apiserver-kubelet-client ์ธ์ฆ์„œ ๋ฐ ํ‚ค ์‚ฌ์šฉ.
[์ธ์ฆ์„œ] ๊ธฐ์กด ํ”„๋ก ํŠธ ํ”„๋ก์‹œ ํด๋ผ์ด์–ธํŠธ ์ธ์ฆ์„œ ๋ฐ ํ‚ค๋ฅผ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ์œ ํšจํ•œ ์ธ์ฆ์„œ ๋ฐ ํ‚ค๊ฐ€ ์ด์ œ "/etc/kubernetes/pki"์— ์žˆ์Šต๋‹ˆ๋‹ค.
[์ธ์ฆ์„œ] ๊ธฐ์กด sa ํ‚ค ์‚ฌ์šฉ.
[kubeconfig] ๊ธฐ์กด ์ตœ์‹  KubeConfig ํŒŒ์ผ ์‚ฌ์šฉ: "/etc/kubernetes/admin.conf"
[kubeconfig] ๊ธฐ์กด ์ตœ์‹  KubeConfig ํŒŒ์ผ ์‚ฌ์šฉ: "/etc/kubernetes/kubelet.conf"
[kubeconfig] ๊ธฐ์กด ์ตœ์‹  KubeConfig ํŒŒ์ผ ์‚ฌ์šฉ: "/etc/kubernetes/controller-manager.conf"
[kubeconfig] ๊ธฐ์กด ์ตœ์‹  KubeConfig ํŒŒ์ผ ์‚ฌ์šฉ: "/etc/kubernetes/scheduler.conf"
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-apiserver์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-apiserver.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-controller-manager์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-controller-manager.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[controlplane] ๊ตฌ์„ฑ ์š”์†Œ kube-scheduler์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/kube-scheduler.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[etcd] ๋กœ์ปฌ etcd ์ธ์Šคํ„ด์Šค์— ๋Œ€ํ•œ Static Pod ๋งค๋‹ˆํŽ˜์ŠคํŠธ๋ฅผ "/etc/kubernetes/manifests/etcd.yaml"์— ์ž‘์„ฑํ–ˆ์Šต๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] kubelet์ด "/etc/kubernetes/manifests" ๋””๋ ‰ํ† ๋ฆฌ์—์„œ Static Pod๋กœ ์ œ์–ด ํ‰๋ฉด์„ ๋ถ€ํŒ…ํ•˜๊ธฐ๋ฅผ ๊ธฐ๋‹ค๋ฆฝ๋‹ˆ๋‹ค.
[์ดˆ๊ธฐํ™”] ์ œ์–ด ํ‰๋ฉด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ์™€์•ผ ํ•˜๋Š” ๊ฒฝ์šฐ 1๋ถ„ ์ด์ƒ ๊ฑธ๋ฆด ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

์œ ๊ฐ์Šค๋Ÿฝ๊ฒŒ๋„ ๋‹ค์Œ๊ณผ ๊ฐ™์€ ์˜ค๋ฅ˜๊ฐ€ ๋ฐœ์ƒํ–ˆ์Šต๋‹ˆ๋‹ค.
์กฐ๊ฑด์„ ๊ธฐ๋‹ค๋ฆฌ๋Š” ์‹œ๊ฐ„์ด ์ดˆ๊ณผ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

์ด ์˜ค๋ฅ˜๋Š” ๋‹ค์Œ์œผ๋กœ ์ธํ•ด ๋ฐœ์ƒํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
- kubelet์ด ์‹คํ–‰๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค.
- ์–ด๋–ค ์‹์œผ๋กœ๋“  ๋…ธ๋“œ์˜ ์ž˜๋ชป๋œ ๊ตฌ์„ฑ์œผ๋กœ ์ธํ•ด kubelet์ด ๋น„์ •์ƒ์ž…๋‹ˆ๋‹ค(ํ•„์š”ํ•œ cgroups ๋น„ํ™œ์„ฑํ™”๋จ).

์‹œ์Šคํ…œ ์ „์› ๊ณต๊ธ‰ ์‹œ์Šคํ…œ์„ ์‚ฌ์šฉํ•˜๋Š” ๊ฒฝ์šฐ ๋‹ค์Œ ๋ช…๋ น์„ ์‚ฌ์šฉํ•˜์—ฌ ์˜ค๋ฅ˜ ๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
- 'systemctl ์ƒํƒœ kubelet'
- 'journalctl -xeu kubelet'

๋˜ํ•œ ์ปจํ…Œ์ด๋„ˆ ๋Ÿฐํƒ€์ž„์—์„œ ์‹œ์ž‘ํ•  ๋•Œ ์ปจํŠธ๋กค ํ”Œ๋ ˆ์ธ ๊ตฌ์„ฑ ์š”์†Œ๊ฐ€ ์ถฉ๋Œํ•˜๊ฑฐ๋‚˜ ์ข…๋ฃŒ๋˜์—ˆ์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
๋ฌธ์ œ๋ฅผ ํ•ด๊ฒฐํ•˜๋ ค๋ฉด ์„ ํ˜ธํ•˜๋Š” ์ปจํ…Œ์ด๋„ˆ ๋Ÿฐํƒ€์ž„ CLI(์˜ˆ: docker)๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋ชจ๋“  ์ปจํ…Œ์ด๋„ˆ๋ฅผ ๋‚˜์—ดํ•˜์‹ญ์‹œ์˜ค.
๋‹ค์Œ์€ ๋„์ปค์—์„œ ์‹คํ–‰๋˜๋Š” ๋ชจ๋“  Kubernetes ์ปจํ…Œ์ด๋„ˆ๋ฅผ ๋‚˜์—ดํ•˜๋Š” ๋ฐฉ๋ฒ•์˜ ํ•œ ์˜ˆ์ž…๋‹ˆ๋‹ค.
- '๋„์ปค PS -a | ๊ทธ๋ ™ ํ๋ธŒ | grep -v ์ผ์‹œ ์ค‘์ง€'
์‹คํŒจํ•œ ์ปจํ…Œ์ด๋„ˆ๋ฅผ ์ฐพ์œผ๋ฉด ๋‹ค์Œ์„ ์‚ฌ์šฉํ•˜์—ฌ ๋กœ๊ทธ๋ฅผ ๊ฒ€์‚ฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
- '๋„์ปค ๋กœ๊ทธ CONTAINERID'
Kubernetes ํด๋Ÿฌ์Šคํ„ฐ๋ฅผ ์ดˆ๊ธฐํ™”ํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.

13 sudo kubeadm ์ดˆ๊ธฐํ™” --token-ttl=0
14 kubectl get pod -o wide
15 sudo kubeadm ์žฌ์„ค์ •
16 sudo kubeadm ์ดˆ๊ธฐํ™” --token-ttl=0
17 ๋„์ปค PS -a | ๊ทธ๋ ™ ํ๋ธŒ | grep -v ์ผ์‹œ ์ค‘์ง€
18๊ฐœ์˜ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ pull --kubernetes-version=v1.11.0
19 sudo kubeadm ์žฌ์„ค์ •
20 ์—ญ์‚ฌ > notes.txt
21๊ฐœ์˜ ์ถ”๊ฐ€ notes.txt
22 sudo ์žฌ๋ถ€ํŒ…
23๊ฐœ์˜ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ ๋ชฉ๋ก
24๊ฐœ์˜ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ pull --kubernetes-version=v1.11.0
25 sudo kubeadm ์ดˆ๊ธฐํ™” --token-ttl=0 --ignore-preflight-errors=all
26๊ฐœ์˜ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์˜ค๊ธฐ
27 sudo kubeadm ์ดˆ๊ธฐํ™” --token-ttl=0 --ignore-preflight-errors=all
28๊ฐœ์˜ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ ํ’€
29 sudo kubeadm ์žฌ์„ค์ •
30๊ฐœ์˜ kubeadm ๊ตฌ์„ฑ ์ด๋ฏธ์ง€ ํ’€
31 sudo kubeadm ์ดˆ๊ธฐํ™” --token-ttl=0 --ignore-preflight-errors=all
32๊ฐœ์˜ ๋„์ปค ์ด๋ฏธ์ง€
33์‹œ๊ฐ„ | grep kubectl
34 ์—ญ์‚ฌ | grep kubectl
35 kubectl get pod -o wide
36 ์—ญ์‚ฌ | ๊ทธ๋ ™ ์ผ์‹œ ์ค‘์ง€
37 ๋„์ปค ps -a | ๊ทธ๋ ™ ํ๋ธŒ | grep -v ์ผ์‹œ ์ค‘์ง€
38 kubectl get pod -o wide
39 sudo ์žฌ๋ถ€ํŒ…
40 kubectl get pod -o wide
41 sudo kubeadm ์ดˆ๊ธฐํ™” --token-ttl=0 --ignore-preflight-errors=all

์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰