NKD-0.2.0：集群启动后日志error显示"tls: private key does not match public key"

**集群启动后日志error显示"tls: private key does not match public key"**

**一、缺陷信息**

**缺陷归属组件与版本：**
NKD 0.2.0
**缺陷简述：**
1. 使用libvirt启动master集群时，网络插件与housekeeper相关pod无法正常启动，集群各pod日志均报error“tls: private key does not match public key”，但仍无法确定该error与前述错误现象有关。
2. 使用libvirt启动多master集群时，各组件启动正常，功能正常，集群各pod日志仍报error“tls: private key does not match public key”
4. kubelet服务报错“http: TLS handshake error from 192.168.132.11:38322”
3. 前期定位为certs模块问题/集群init、join配置参数问题：未能有效的设置TLS验证

**【环境信息】**
init.yaml 部分内容

```
kubernetes:
  kubernetes_version: "v1.20.2"
  apiserver_endpoint: "192.168.132.11:6443"
  image_registry: "registry.cn-hangzhou.aliyuncs.com/google_containers"
  pause_image: "pause:3.6"
  release_image_url: "hub.oepkgs.net/nestos/nestos-test:22.03-LTS-SP3.20240105.0-x86_64-k8s-v1.20.2"
  token: o0tztj.kjsvjzha417yk5oo
  adminkubeconfig: /etc/nkd/cluster/admin.config
  certificatekey: "a301c9c55596c54c5d4c7173aa1e3b6fd304130b0c703bb23149c0c69f94b8e0"
  network:
    service_subnet: 10.96.0.0/16
    pod_subnet: "10.100.0.0/16"
    coredns_image_version: "1.7.0"
```

**【其他相关附件信息】**
暂无，后续补充

**缺陷分析指导链接：**
https://v1-27.docs.kubernetes.io/zh-cn/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/
https://v1-27.docs.kubernetes.io/zh-cn/docs/reference/config-api/kubeadm-config.v1beta3/

openEuler/nestos-kubernetes-deployer
关闭

内容风险标识

评论 (3)

openEuler/nestos-kubernetes-deployer关闭 .gitee-modal { width: 500px !important; }

内容风险标识