kubernetes heapster问题整理

问题一：

x509: certificate signed by unknown authority报错

解决方法：
把原来的参数更改成下面的参数,heapster 即可正常启动
--source=kubernetes:https://kubernetes.default?inClusterConfig=false&useServiceAccount=true&auth=&kubeletPort=10250&kubeletHttps=true&insecure=true

参考链接：https://www.aityp.com/10250-stats-container-x509-cannot-validate-certificate/

问题二：

提示“403 Forbidden”, response: "Forbidden (user=system:serviceaccount:kube-system:heapster, verb=create, resource=nodes, subresource=stats)"

解决方法：
修改ClusterRole: system:heapster的权限，添加Resource: nodes/stats的create权限
kubectl get clusterrole system:heapster -o yaml > heapster-clusterrole.yaml
vim heapster-clusterrole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{"rbac.authorization.kubernetes.io/autoupdate":"true"},"creationTimestamp":"2019-08-13T06:41:27Z","labels":{"kubernetes.io/bootstrapping":"rbac-defaults"},"name":"system:heapster","resourceVersion":"52","selfLink":"/apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aheapster","uid":"9d7a9d70-94a3-4e0b-9bae-dc7c279b5f3e"},"rules":[{"apiGroups":[""],"resources":["events","namespaces","nodes","pods","nodes/stats"],"verbs":["get","list","watch"]},{"apiGroups":["extensions"],"resources":["deployments"],"verbs":["get","list","watch"]}]}
rbac.authorization.kubernetes.io/autoupdate: "true"
creationTimestamp: "2019-08-13T06:41:27Z"
labels:
kubernetes.io/bootstrapping: rbac-defaults
name: system:heapster
resourceVersion: "12507"
selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/system%3Aheapster
uid: 9d7a9d70-94a3-4e0b-9bae-dc7c279b5f3e
rules:
- apiGroups:
- ""
resources:
- events
- namespaces
- nodes
- pods
- nodes/stats
verbs:
- create
- get
- list
- watch
- apiGroups:
- extensions
resources:
- deployments
verbs:
- get
- list
- watch
参考链接：https://www.cnblogs.com/vincenshen/p/9638162.html

kubernetes heapster问题整理相关推荐

kubernetes常用命令整理
一.维护类: master节点: [root@k8s-master01 -]# for I in etcd kube-apiserver kube-controller-manager kube-sc ...
详解k8s一个完整的监控方案(Heapster+Grafana+InfluxDB) - kubernetes
每天学习一点点编程PDF电子书.视频教程免费下载: http://www.shitanlife.com/code 1.浅析整个监控流程 heapster是一个监控计算.存储.网络等集群资源的工具,以 ...
minikube 安装 Kubernetes Dashboard 并集成 Heapster
目录 Kubernetes Dashboard 介绍环境.软件准备 Kubernetes Dashboard 安装 Heapster 插件安装简单演示使用 Dashboard 1.Kubernet ...
Kubernetes Dashboard集成Heapster
默认安装后的Kubernetes dashboard 如下图所示,是无法图形化展现集群度量指标信息的: 图形化展示度量指标的实现需要集成k8s的另外一个Addons组件: Heapster . He ...
kubernetes部署-Heapster(十)
kubernetes部署-Heapster 部署 Heapster 插件官方github下载地址需要新版可以去下创建所需yaml文件 cd /data/src wget https://githu ...
Heapster -- Kubernetes Dashboard集成Heapster
原始kubernetes dashboard的界面中仅显示了pod一些配置信息,无法图形化展现集群度量指标信息.原始图如下(此处从网上找了一个图..): 而如果要展示图形化的集群度量指标信息,就需要安 ...
Kubernetes主机和容器的监控方案
本文是有容云后端开发工程师李强 7月27日在微信群分享内容整理摘要:随着Docker容器云的广泛应用,大量的业务软件运行在容器中,这使得对docker容器的监控越来越重要.传统的监控系统大多数是针 ...
用 Heapster 监控集群 - 每天5分钟玩转 Docker 容器技术（176）
2019独角兽企业重金招聘Python工程师标准>>> Heapster 是 Kubernetes 原生的集群监控方案.Heapster 以 Pod 的形式运行,它会自动发现集群节点 ...
安装kubernetes1.12.1的 dashboard v1.10 + Heapster
2019独角兽企业重金招聘Python工程师标准>>> Dashboard是kubernetes的官方WEB UI. Heapster为集群添加使用统计和监控功能,为Dashboar ...

kubernetes heapster问题整理

问题一：

kubernetes heapster问题整理相关推荐

最新文章

热门文章