用rancher搭建的k8s集群,离线部署kubesphere时devops工程一直部署失败,报错的意思大概是证书创建不了什么的,导致ks-account组件一直启动不了,无法登陆,请问这个问题怎么解决?
报错信息:
{"changed": true, "cmd": "/bin/bash /etc/kubesphere/s2i/certs.sh
--service webhook-server-service --namespace kubesphere-devops-system
--secret webhook-server-secret \n", "delta": "0:00:13.161828", "end":
"2020-03-25 03:57:12.595237", "msg": "non-zero return code", "rc": 1,
"start": "2020-03-25 03:56:59.433409", "stderr":
"Generating RSA private key, 2048 bit long modulus (2 primes)\n....+++++\n.........................................................+++++\ne
is 65537 (0x010001)\nERROR:
After approving csr webhook-server-service.kubesphere-devops-system,
the signed certificate did not appear on the resource.
Giving up after 10 attempts.", "stderr_lines":
["Generating RSA private key, 2048 bit long modulus (2 primes)", "....+++++", ".........................................................+++++", "e i
s 65537 (0x010001)", "
ERROR: After approving csr webhook-server-service.kubesphere-devops-system,
the signed certificate did not appear on the resource.
Giving up after 10 attempts."], "stdout": "
creating certs in tmpdir /tmp/tmp.FEjdjC
\ncertificatesigningrequest.certificates.k8s.io/webhook-server-service.kubesphere-devops-system created\nNAME AGE REQUESTOR
CONDITION\nwebhook-server-service.kubesphere-devops-system 0s system:serviceaccount:kubesphere-system:ks-installer Pending\ncertificatesigningrequest.certificates.k8s.io/webhook-server-service.kubesphere-devops-system approved", "stdout_lines": ["creating certs in tmpdir /tmp/tmp.FEjdjC ", "certificatesigningrequest.certificates.k8s.io/webhook-server-service.kubesphere-devops-system created", "NAME AGE REQUESTOR CONDITION", "webhook-server-service.kubesphere-devops-system 0s system:serviceaccount:kubesphere-system:ks-installer Pending
",
"certificatesigningrequest.certificates.k8s.io/webhook-server-service.kubesphere-devops-system approved"]}",
"uuid": "df282acd-292b-498c-b9ad-db6e5b84f996"