重启docker之后安装好的kubesphere就无法登陆了
操作系统信息
例如：虚拟机，Ubuntu22.04，4C/8G
Kubernetes版本信息
Client Version: version.Info{Major:“1”, Minor:“22”, GitVersion:“v1.22.10”, GitCommit:“eae22ba6238096f5dec1ceb62766e97783f0ba2f”, GitTreeState:“clean”, BuildDate:“2022-05-24T12:56:35Z”, GoVersion:“go1.16.15”, Compiler:“gc”, Platform:“linux/amd64”}
Server Version: version.Info{Major:“1”, Minor:“22”, GitVersion:“v1.22.10”, GitCommit:“eae22ba6238096f5dec1ceb62766e97783f0ba2f”, GitTreeState:“clean”, BuildDate:“2022-05-24T12:50:52Z”, GoVersion:“go1.16.15”, Compiler:“gc”, Platform:“linux/amd64”}
容器运行时
将 docker version / crictl version / nerdctl version 结果贴在下方
docker version
Client: Docker Engine - Community
Version: 23.0.3
API version: 1.42
Go version: go1.19.7
Git commit: 3e7cbfd
Built: Tue Apr 4 22:05:48 2023
OS/Arch: linux/amd64
Context: default
Server: Docker Engine - Community
Engine:
Version: 23.0.3
API version: 1.42 (minimum version 1.12)
Go version: go1.19.7
Git commit: 59118bf
Built: Tue Apr 4 22:05:48 2023
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: 1.6.20
GitCommit: 2806fc1057397dbaeefbea0e4e17bddfbd388f38
runc:
Version: 1.1.5
GitCommit: v1.1.5-0-gf19387a
docker-init:
Version: 0.19.0
GitCommit: de40ad0
KubeSphere版本信息
例如：v3.3.0。离线安装。在已有K8s上安装。
问题是什么，重启了一次容器之后就出现无法登陆现象
<– GET / 2023/05/09T10:10:06.183
FetchError: request to https://ks-apiserver/api/v1/namespaces/kubesphere-system/configmaps/kubesphere-config failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
FetchError: request to https://ks-apiserver/kapis/iam.kubesphere.io/v1alpha2/users/admin failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
FetchError: request to https://ks-apiserver/kapis/iam.kubesphere.io/v1alpha2/users/admin failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
–> GET / 404 43ms - 2023/05/09T10:10:06.226
FetchError: request to https://ks-apiserver/kapis/config.kubesphere.io/v1alpha2/configs/configz failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
FetchError: request to https://ks-apiserver/api/v1/nodes failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
FetchError: request to https://ks-apiserver/kapis/config.kubesphere.io/v1alpha2/configs/gpu/kinds failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
<– GET / 2023/05/09T10:18:10.479
UnauthorizedError: Not Login
at Object.throw (/opt/kubesphere/console/server/server.js:22969:11)
at getCurrentUser (/opt/kubesphere/console/server/server.js:6957:14)
at renderView (/opt/kubesphere/console/server/server.js:71947:7)
at runMicrotasks (<anonymous>)
at processTicksAndRejections (internal/process/task_queues.js:97:5)
at async /opt/kubesphere/console/server/server.js:40116:7
at async logger (/opt/kubesphere/console/server/server.js:37060:7)
at async /opt/kubesphere/console/server/server.js:31823:26
at async /opt/kubesphere/console/server/server.js:31823:26
at async /opt/kubesphere/console/server/server.js:31823:26–> GET / 302 4ms 43b 2023/05/09T10:18:10.483
<– GET /login 2023/05/09T10:18:10.490
FetchError: request to https://ks-apiserver/kapis/config.kubesphere.io/v1alpha2/configs/configz failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
FetchError: request to https://ks-apiserver/kapis/config.kubesphere.io/v1alpha2/configs/oauth failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
–> GET /login 200 16ms 16.91kb 2023/05/09T10:18:10.506
<– POST /login 2023/05/09T10:18:17.351
FetchError: request to https://ks-apiserver/oauth/token failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
–> POST /login 200 11ms 125b 2023/05/09T10:18:17.362
<– POST /login 2023/05/09T10:18:23.014
FetchError: request to https://ks-apiserver/oauth/token failed, reason: unable to verify the first certificate
at ClientRequest.<anonymous> (/opt/kubesphere/console/server/server.js:19477:11)
at ClientRequest.emit (events.js:314:20)
at TLSSocket.socketErrorListener (_http_client.js:427:9)
at TLSSocket.emit (events.js:314:20)
at emitErrorNT (internal/streams/destroy.js:92:8)
at emitErrorAndCloseNT (internal/streams/destroy.js:60:3)
at processTicksAndRejections (internal/process/task_queues.js:84:21) {type: ‘system’,
errno: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’,
code: ‘UNABLE_TO_VERIFY_LEAF_SIGNATURE’
}
–> POST /login 200 12ms 125b 2023/05/09T10:18:23.026