基于k8s安装kubesphere v3.4.0时ks-installerafter报错:Retrying after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed

系统 Centos7
k8s版本 v.1.28.0 (自签证书)
kubesphere版本 v3.4.0

背景:自搭的k8s V1.28.0集群,搭建kubesphere

1.查看日志,发现是执行installRunner.py抛的错,进去pod手动执行还是抛同样的错

kubectl logs -f ks-installer-86c789f977-mm694 -n kubesphere-system

image

kubectl exec -it ks-installer-86c789f977-mm694 -n kubesphere-system -- bash

2.官方社区的解答方案是修改ks-installerafter镜像的配置之后重构镜像(不清楚这样做的影响,这个报错应该是python的ssl模块访问自签https抛出来,替换的相当是kubernetes-client-python模块中的ssl的配置,这个方法可行,猜测也可以通过配置configuration.py中的ca证书和key来解决未直接尝试)

docker build -f ./Dockerfile -t kubesphere/ks-installer:v3.4.0

Dockerfile
FROM kubesphere/ks-installer:v3.4.0
USER root
RUN sed -i 's/self.verify_ssl = True/self.verify_ssl = False/g' /usr/local/lib/python3.10/site-packages/kubernetes/client/configuration.py
USER kubesphere

参考:https://ask.kubesphere.io/forum/d/6593-k8s1218kubesphere321sslerrorsslcertverificationerror/2

posted @ 2023-11-03 09:32  王又又的锅  阅读(494)  评论(0)    收藏  举报