操作系统信息
虚拟机：Centos 7.9.2009 5.17.6-1.el7.elrepo.x86_64

Kubernetes版本信息
v1.20.15 二进制安装

容器运行时
docker version 20.10.15

v3.2.1在线安装第一次登录修改密码时报错

问题是什么
ks-controller-manager报错如下：

E0517 09:28:09.197630 1 basecontroller.go:132] error syncing ‘admin-wqgk2’ in loginrecord-controller: Internal error occurred: failed calling webhook “validating-user.kubesphere.io”: Post “https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2-user?timeout=30s”: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers), requeuing

E0517 09:28:09.199033 1 basecontroller.go:132] error syncing ‘admin-l6g59’ in loginrecord-controller: Internal error occurred: failed calling webhook “users.iam.kubesphere.io”: Post “https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2?timeout=30s”: context deadline exceeded, requeuing

I0517 09:28:09.203746 1 basecontroller.go:127] Successfully Synced key:admin-wqgk2 in loginrecord-controller

I0517 09:28:09.203942 1 event.go:282] Event(v1.ObjectReference{Kind:“LoginRecord”, Namespace:"", Name:“admin-wqgk2”, UID:“69ce86b5-aebc-4634-a513-56711b8e0b8b”, APIVersion:“iam.kubesphere.io/v1alpha2”, ResourceVersion:“1697982”, FieldPath:""}): type: ‘Normal’ reason: ‘Synced’ LoginRecord synced successfully

I0517 09:28:09.204188 1 basecontroller.go:127] Successfully Synced key:admin-l6g59 in loginrecord-controller

I0517 09:28:09.204247 1 event.go:282] Event(v1.ObjectReference{Kind:“LoginRecord”, Namespace:"", Name:“admin-l6g59”, UID:“773d553f-b3f0-4e96-b889-d43604bad7a6”, APIVersion:“iam.kubesphere.io/v1alpha2”, ResourceVersion:“1699281”, FieldPath:""}): type: ‘Normal’ reason: ‘Synced’ LoginRecord synced successfully

E0517 09:28:09.545194 1 user_controller.go:127] controllers/user-controller “msg”=“failed to update user” “error”="Internal error occurred: failed calling webhook \“validating-user.kubesphere.io\”: Post \“https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2-user?timeout=30s\”: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)" “user”={“Namespace”:"",“Name”:“admin”}

E0517 09:28:09.545355 1 controller.go:304] controller/user-controller “msg”=“Reconciler error” “error”="Internal error occurred: failed calling webhook \“validating-user.kubesphere.io\”: Post \“https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2-user?timeout=30s\”: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)" “name”=“admin” “namespace”="" “reconciler group”=“iam.kubesphere.io” “reconciler kind”=“User”

E0517 09:28:23.412512 1 basecontroller.go:132] error syncing ‘admin-zsnbf’ in loginrecord-controller: Internal error occurred: failed calling webhook “validating-user.kubesphere.io”: Post “https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2-user?timeout=30s”: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers), requeuing

I0517 09:28:23.418874 1 basecontroller.go:127] Successfully Synced key:admin-zsnbf in loginrecord-controller

I0517 09:28:23.419163 1 event.go:282] Event(v1.ObjectReference{Kind:“LoginRecord”, Namespace:"", Name:“admin-zsnbf”, UID:“10dde53c-37d6-40cb-bfde-e8e2799c4cd8”, APIVersion:“iam.kubesphere.io/v1alpha2”, ResourceVersion:“1699751”, FieldPath:""}): type: ‘Normal’ reason: ‘Synced’ LoginRecord synced successfully

E0517 09:28:39.561780 1 user_controller.go:127] controllers/user-controller “msg”=“failed to update user” “error”="Internal error occurred: failed calling webhook \“validating-user.kubesphere.io\”: Post \“https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2-user?timeout=30s\”: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)" “user”={“Namespace”:"",“Name”:“admin”}

E0517 09:28:39.561956 1 controller.go:304] controller/user-controller “msg”=“Reconciler error” “error”="Internal error occurred: failed calling webhook \“validating-user.kubesphere.io\”: Post \“https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2-user?timeout=30s\”: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)" “name”=“admin” “namespace”="" “reconciler group”=“iam.kubesphere.io” “reconciler kind”=“User”

面板报错如下：

无论点提交还是稍后修改都没反应，然后报错

访问ks-controller-manager svc报错如下：

[root@k8s-master1 cfg]# kubectl get validatingwebhookconfigurations users.iam.kubesphere.io -o jsonpath=‘{.webhooks[0].clientConfig.caBundle}’ | base64 -d > ca.crt

[root@k8s-master1 cfg]# curl -v –cacert ca.crt https://ks-controller-manager.kubesphere-system.svc

* Could not resolve host: ks-controller-manager.kubesphere-system.svc; 未知的错误

* Closing connection 0

curl: (6) Could not resolve host: ks-controller-manager.kubesphere-system.svc; 未知的错误

ks组件状态都正常：

填写默认登录密码后修改访问url可直接进入主界面：