multicluster 开启后报错麻烦大佬帮忙看下报证书错误

Reminisd

配置：
multicluster:
clusterRole: host

Error creating KubeFedConfig “kube-federation-system/kubefed”: Internal error occurred: failed calling webhook “kubefedconfigs.core.kubefed.io”: Post https://kubefed-admission-webhook.kube-federation-system.svc:443/apis/mutation.core.kubefed.io/v1beta1/kubefedconfigs?timeout=30s: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubefed-admission-webhook-ca”)

Reminisd

k8s 版本1.16.4

Jeff

Reminisd kubesphere什么时候安装的呢，是使用最新的安装包么

Reminisd

Jeff 是的用的latest 镜像后来我把集群联邦的crds 删除了重新部署这块还是这个证书报错

Reminisd

Jeff 目前问题还在不启用联邦没问题我删除crds 即kubefed.io相关的扩展 ![进行重装这个组件后相关的报错发生了变化!

Reminisd

"start": "2020-09-14 09:19:50.611898",
  "stderr": "Error: failed to create resource: Internal error occurred: failed calling webhook \"kubefedconfigs.core.kubefed.io\": Post https://kubefed-admission-webhook.kube-federation-system.svc:443/apis/validation.core.kubefed.io/v1beta1/kubefedconfigs?timeout=30s: dial tcp 10.96.232.166:443: connect: connection refused",
  "stderr_lines": [
    "Error: failed to create resource: Internal error occurred: failed calling webhook \"kubefedconfigs.core.kubefed.io\": Post https://kubefed-admission-webhook.kube-federation-system.svc:443/apis/validation.core.kubefed.io/v1beta1/kubefedconfigs?timeout=30s: dial tcp 10.96.232.166:443: connect: connection refused"
  ],
  "stdout": "Release \"kubefed\" does not exist. Installing it now.",
  "stdout_lines": [
    "Release \"kubefed\" does not exist. Installing it now."

Reminisd

内部容器相关报错

NongCloud

你的问题解决了吗？我也遇到了同样的情况