创建部署问题时,请参考下面模板,你提供的信息越多,越容易及时获得解答。如果未按模板创建问题,管理员有权关闭问题。
确保帖子格式清晰易读,用 markdown code block 语法格式化代码块。
你只花一分钟创建的问题,不能指望别人花上半个小时给你解答。

操作系统信息
例如:虚拟机/物理机,Centos7.9,4C/8G

Kubernetes版本信息
kubectl version 命令执行结果贴在下方

WARNING: This version information is deprecated and will be replaced with the output from kubectl version –short. Use –output=yaml|json to get the full version.

Client Version: version.Info{Major:“1”, Minor:“25”, GitVersion:“v1.25.10”, GitCommit:“e770bdbb87cccdc2daa790ecd69f40cf4df3cc9d”, GitTreeState:“clean”, BuildDate:“2023-05-17T14:12:20Z”, GoVersion:“go1.19.9”, Compiler:“gc”, Platform:“linux/amd64”}

Kustomize Version: v4.5.7

Server Version: version.Info{Major:“1”, Minor:“25”, GitVersion:“v1.25.10”, GitCommit:“e770bdbb87cccdc2daa790ecd69f40cf4df3cc9d”, GitTreeState:“clean”, BuildDate:“2023-05-17T14:06:35Z”, GoVersion:“go1.19.9”, Compiler:“gc”, Platform:“linux/amd64”}

容器运行时
containerd://1.6.4

KubeSphere版本信息
v3.4.1

问题是什么
报错日志是什么,最好有截图。

纳管的成员集群故障后进行重装,在hosts集群控制面无法删除集群(删除时提示删除成功,但实际没有删除),使用kubectl delete cluster 命令行也无法删除(执行后一直卡着),编辑集群信息时提示如下报错信息

Get “https://172.16.12.104:6443/api/v1/namespaces/kube-system”: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)

admission webhook “validating-cluster.kubesphere.io” denied the request: Get “https://172.16.12.104:6443/api/v1/namespaces/kube-system”: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)

使用 kubectl patch cluster gm-01-plat-dev-0002 -p "{\“metadata\”:{\“finalizers\”:null}}" –type=merge

Error from server (Get “https://172.16.12.104:6443/api/v1/namespaces/kube-system”: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)): admission webhook “validating-cluster.kubesphere.io” denied the request: Get “https://172.16.12.104:6443/api/v1/namespaces/kube-system”: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “kubernetes”)

5 个月 后

我也遇到这个问题了,但是我kubectl get cluster 都是空的,你最后是如何解决的呢

kubectl delete clusters.cluster.kubesphere.io xxxx 就一直卡主了,编辑也yaml 删除,也无法编辑,这个问题咋解决呢

3 个月 后

如果没有按照流程操作,先把 K8s 集群删除了,再去 KS 页面删除就会这样,可以用下面的命令

kubectl delete validatingwebhookconfigurations cluster.kubesphere.io
kubectl patch cluster xxx --type merge -p '{"metadata":{"finalizers":null}}'