calico pod启动异常Init:CrashLoopBackOff

Question

calico-node pod报错：
Warning BackOff 10m (x4 over 10m) kubelet Back-off restarting failed container
Warning DNSConfigForming 29s (x58 over 10m) kubelet Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 128.205.1.100 128.205.1.101 128.205.1.102
calico-controller pod报错
Warning FailedScheduling 16m default-scheduler 0/3 nodes are available: 3 node(s) had taint {node.kubernetes.io/not-ready: }, that the pod didn’t tolerate.
Warning FailedScheduling 16m default-scheduler 0/3 nodes are available: 3 node(s) had taint {node.kubernetes.io/not-ready: }, that the pod didn’t tolerate.

Answer 1

提问者 Tity酱 2022-09-04 16:38:48

把/etc/resolv.conf里的dns地址只保留了一个，现在calico-node pod提示back-off restarting failed container。还是起不来, 查看pod日志报错cni-installer: unable to create token for CNI kubeconfig error=Post "http://10.254.0.1:443/api/v1/namespace/kube-system/serviceaccounts/calico-node/token": x509: certificate is valid for 127.0.0.1, not 10.254.0.1

• 刘果国 #1

  看起来是证书问题 没包含10.254.0.1这个ip地址