37 lines
1.1 KiB
Diff
37 lines
1.1 KiB
Diff
|
From 11a733cc8b9eb2c5ad58f14e75d5a88109d9f2ee Mon Sep 17 00:00:00 2001
|
|||
|
|
From: zhangxiaoyu <zhangxiaoyu58@huawei.com>
|
|||
|
|
Date: Thu, 25 Nov 2021 09:49:49 +0800
|
|||
|
|
Subject: [PATCH 12/12] add deploy problems doc
|
|||
|
|
|
|||
|
|
Signed-off-by: zhangxiaoyu <zhangxiaoyu58@huawei.com>
|
|||
|
|
---
|
|||
|
|
docs/deploy_problems.md | 14 +++++++++++++-
|
|||
|
|
1 file changed, 13 insertions(+), 1 deletion(-)
|
|||
|
|
|
|||
|
|
diff --git a/docs/deploy_problems.md b/docs/deploy_problems.md
|
|||
|
|
index a26418a..6f259c9 100644
|
|||
|
|
--- a/docs/deploy_problems.md
|
|||
|
|
+++ b/docs/deploy_problems.md
|
|||
|
|
@@ -78,4 +78,16 @@ kubelet启动不了，详细报错可以参考[issue](https://gitee.com/openeule
|
|||
|
|
$ wget https://curl.se/ca/cacert.pem
|
|||
|
|
$ mv cacert.pem /etc/pki/ca-trust/source/anchors/
|
|||
|
|
$ update-ca-trust
|
|||
|
|
-```
|
|||
|
|
\ No newline at end of file
|
|||
|
|
+```
|
|||
|
|
+
|
|||
|
|
+### 证书校验失败
|
|||
|
|
+
|
|||
|
|
+在WaitNodeRegister阶段，报错Get "https://10.253.173.8:6443/api/v1/nodes/10.253.173.8": x509: certificate has expired or is not yet valid: current time 2021-11-24T17:12:19Z is before 2021-11-24T23:54:02Z
|
|||
|
|
+
|
|||
|
|
+#### 原因
|
|||
|
|
+
|
|||
|
|
+机器时间未同步，生成证书的节点时间晚于worker节点的时间，导致证书校验失败
|
|||
|
|
+
|
|||
|
|
+#### 解决方法
|
|||
|
|
+
|
|||
|
|
+同步机器时间
|
|||
|
|
--
|
|||
|
|
2.25.1
|
|||
|
|
|