基于k8s安装kubesphere v3.4.0时ks-installerafter报错:Retrying after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
| 系统 | Centos7 |
|---|---|
| k8s版本 | v.1.28.0 (自签证书) |
| kubesphere版本 | v3.4.0 |
背景:自搭的k8s V1.28.0集群,搭建kubesphere
1.查看日志,发现是执行installRunner.py抛的错,进去pod手动执行还是抛同样的错
kubectl logs -f ks-installer-86c789f977-mm694 -n kubesphere-system

kubectl exec -it ks-installer-86c789f977-mm694 -n kubesphere-system -- bash
2.官方社区的解答方案是修改ks-installerafter镜像的配置之后重构镜像(不清楚这样做的影响,这个报错应该是python的ssl模块访问自签https抛出来,替换的相当是kubernetes-client-python模块中的ssl的配置,这个方法可行,猜测也可以通过配置configuration.py中的ca证书和key来解决未直接尝试)
docker build -f ./Dockerfile -t kubesphere/ks-installer:v3.4.0
Dockerfile
FROM kubesphere/ks-installer:v3.4.0
USER root
RUN sed -i 's/self.verify_ssl = True/self.verify_ssl = False/g' /usr/local/lib/python3.10/site-packages/kubernetes/client/configuration.py
USER kubesphere
参考:https://ask.kubesphere.io/forum/d/6593-k8s1218kubesphere321sslerrorsslcertverificationerror/2

浙公网安备 33010602011771号