Kubernetes 配置管理

Kubernetes 配置管理

一次配置新的集群 kubeconfig 后连接提示如下错误:

kubectl --kubeconfig=config.zhongyi.online get nodes
Unable to connect to the server: x509: certificate is valid for 10.233.0.1, 192.168.1.41, 127.0.0.1, 192.168.1.246, 192.168.1.81, 192.168.1.54, not 36.134.130.134

提示证书不包含 ip: 36.134.130.134

解决办法:

1. 加上 --insecure-skip-tls-verify 参数，忽略 tls 证书校验

kubectl --kubeconfig=config.zhongyi get nodes

2. 在 kubeconfig 配置文件加上 insecure-skip-tls-verify 配置,并删除 clusters.cluster.certificate-authority-data 配置

apiVersion: v1
clusters:
- cluster:
    server: https://36.134.130.134:6443
    insecure-skip-tls-verify: true
  name: local

如下即可

kubectl --kubeconfig=config.zhongyi get nodes

insecure-skip-tls-verify is supposed to be allowed but it isn’t #6383

kubectl 如何合并多个配置文件

也可以指定配置列表

export KUBECONFIG=~/.kube/config:~/.kube/config.zhongyi.online:~/.kube/config.zhongyi.test

也可以动态指定配置

export KUBECONFIG=~/.kube/config:$(find ~/.kube/* -type f -name config.* | tr '\n' ':')

将所有配置合并显示

kubectl config view --flatten

• 如何合并多个 kubeconfig
• How to Merge Multiple kubeconfig Files into One