Kubernetes: Difference between revisions
imported>Iceychris m * dns issues: restart services |
imported>Iceychris m * debugging -> troubleshooting & fix cluster join error |
||
| Line 145: | Line 145: | ||
{{expansion|How to set this up?}} | {{expansion|How to set this up?}} | ||
== | == Troubleshooting == | ||
<syntaxhighlight> | <syntaxhighlight> | ||
| Line 152: | Line 152: | ||
kubectl get nodes | kubectl get nodes | ||
</syntaxhighlight> | </syntaxhighlight> | ||
=== Join Cluster not working === | |||
If you face issues while running the <code>nixos-kubernetes-node-join</code> script: | |||
<syntaxhighlight> | |||
Restarting certmgr... | |||
Job for certmgr.service failed because a timeout was exceeded. | |||
See "systemctl status certmgr.service" and "journalctl -xe" for details. | |||
</syntaxhighlight> | |||
Go investigate with <code>journalctl -u certmgr</code>: | |||
<syntaxhighlight> | |||
... certmgr: loading from config file /nix/store/gj7qr7lp6wakhiwcxdpxwbpamvmsifhk-certmgr.yaml | |||
... manager: loading certificates from /nix/store/4n41ikm7322jxg7bh0afjpxsd4b2idpv-certmgr.d | |||
... manager: loading spec from /nix/store/4n41ikm7322jxg7bh0afjpxsd4b2idpv-certmgr.d/flannelClient.json | |||
... [ERROR] cert: failed to fetch remote CA: failed to parse rootCA certs | |||
</syntaxhighlight> | |||
In this case, <code>cfssl</code> could be overloaded. | |||
Restarting cfssl on the <code>master</code> node should help: <code>systemctl restart cfssl</code> | |||
=== DNS issues === | === DNS issues === | ||