在腾讯云 TKE 安装 KubeSphere出问题

7158798

不知道什么情况

Feynman

7158798 TKE 的文档可能需要重新验证和更新一下，因为 TKE 最近对 PVC 大小做了限制，你参考这个文档修改参数后重新安装试试：https://kubesphere.com.cn/forum/d/2702-tke

Rick

没有看到你遇到了什么问题？你是根据哪个教程（文档）操作的，哪一个环节遇到了问题。

7158798

Feynman 还没到那一步啊就出问题了

7158798

Feynman 我提供环境给你你去研究一下不？

Feynman

7158798 先把问题描述清楚吧

Cauchy

7158798

什么问题呢？是否可以提供下报错日志？

7158798

Feynman
帮我瞅瞅

7158798

Cauchy

首次安装后登录显示 Internal error occurred: account is not active

root@master1:/home/ubuntu# kubectl -n kubesphere-system logs <ks-controller-manager pod>
bash: syntax error near unexpected token `newline’
root@master1:/home/ubuntu# kubectl -n kubesphere-system exec -it openldap-0 slapcat
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl kubectl exec [POD] – [COMMAND] instead.
dn: dc=kubesphere,dc=io
objectClass: top
objectClass: dcObject
objectClass: organization
o: kubesphere
dc: kubesphere
structuralObjectClass: organization
creatorsName: cn=admin,dc=kubesphere,dc=io
entryUUID: 1adf9c26-e366-103a-93c1-9da2e29fc62f
createTimestamp: 20210105055340Z
entryCSN: 20210105055340.124934Z#000000#000#000000
modifiersName: cn=admin,dc=kubesphere,dc=io
modifyTimestamp: 20210105055340Z
contextCSN: 20210105055405.946180Z#000000#001#000000
contextCSN: 20210105055340.875876Z#000000#002#000000

dn: cn=admin,dc=kubesphere,dc=io
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
structuralObjectClass: organizationalRole
creatorsName: cn=admin,dc=kubesphere,dc=io
userPassword:: e1NTSEF9RGxDUWY1dEJVVGVwRGpBTTMrSjlRTXlLL0dMbkFtdVY=
entryUUID: 1ae02b46-e366-103a-93c2-9da2e29fc62f
createTimestamp: 20210105055340Z
entryCSN: 20210105055340.128613Z#000000#000#000000
modifiersName: cn=admin,dc=kubesphere,dc=io
modifyTimestamp: 20210105055340Z

dn: ou=Users,dc=kubesphere,dc=io
objectClass: organizationalUnit
objectClass: top
ou: Users
structuralObjectClass: organizationalUnit
entryUUID: 0422deee-e366-103a-8656-01f802279572
creatorsName: cn=admin,dc=kubesphere,dc=io
createTimestamp: 20210105055301Z
entryCSN: 20210105055301.978135Z#000000#001#000000
modifiersName: cn=admin,dc=kubesphere,dc=io
modifyTimestamp: 20210105055301Z

dn: ou=Groups,dc=kubesphere,dc=io
objectClass: organizationalUnit
objectClass: top
ou: Users
ou: Groups
structuralObjectClass: organizationalUnit
entryUUID: 04253824-e366-103a-8657-01f802279572
creatorsName: cn=admin,dc=kubesphere,dc=io
createTimestamp: 20210105055301Z
entryCSN: 20210105055301.993542Z#000000#001#000000
modifiersName: cn=admin,dc=kubesphere,dc=io
modifyTimestamp: 20210105055301Z

dn: uid=admin,ou=Users,dc=kubesphere,dc=io
objectClass: inetOrgPerson
objectClass: top
cn: admin
sn: admin
structuralObjectClass: inetOrgPerson
uid: admin
entryUUID: 043d6890-e366-103a-8658-01f802279572
creatorsName: cn=admin,dc=kubesphere,dc=io
createTimestamp: 20210105055302Z
userPassword:: UEA4OHcwcmQ=
entryCSN: 20210105061303.339672Z#000000#001#000000
modifiersName: cn=admin,dc=kubesphere,dc=io
modifyTimestamp: 20210105061303Z

root@master1:/home/ubuntu#

Feynman

7158798 你看一下 installer 日志有没有异常？

kubectl logs -n kubesphere-system $(kubectl get pod -n kubesphere-system -l app=ks-install -o jsonpath='{.items[0].metadata.name}') -f

Forest-L

7158798 参考这文章，https://kubesphere.com.cn/forum/d/2217-account-is-not-active

7158798

Feynman 安装日志正常

7158798

Forest-L 我的是1.8的

hjwsxl

Forest-L yuswift TKE 中新安装了 ks 3.0.0 确实报了上述 admin 登录的问题

k8s 版本为 1.18：

Server Version: version.Info{Major:"1", Minor:"18+", GitVersion:"v1.18.4-tke.6", GitCommit:"194201819cf1e5cf45d38f72ce1aac9efca4c7ff", GitTreeState:"clean", BuildDate:"2020-12-29T09:13:24Z", GoVersion:"go1.15.6", Compiler:"gc", Platform:"linux/amd64"}

1）ks-controller-manager 日志

2）ks-apiserver 日志

yuswift

7158798 你的版本是1.8还是1.18？贴一下ks-apiserver & ks-controller-manager日志

hongming

hjwsxl
https://kubesphere.com.cn/forum/d/2217-account-is-not-active
看样子是 TKE 用 go 1.15 编译的K8s，需要更新一下 ks-controller-manager 的证书

kubectl apply -f https://raw.githubusercontent.com/kubesphere/ks-installer/2c4b479ec65110f7910f913734b3d069409d72a8/roles/ks-core/prepare/files/ks-init/users.iam.kubesphere.io.yaml
kubectl apply -f https://raw.githubusercontent.com/kubesphere/ks-installer/2c4b479ec65110f7910f913734b3d069409d72a8/roles/ks-core/prepare/files/ks-init/webhook-secret.yaml
kubectl -n kubesphere-system rollout restart deploy ks-controller-manager

hjwsxl

hongming 问题已解决，感谢~