Kubernetes安装问题汇总～更新中

• ~#:kubectl get nodes
  Unable to connect to the server: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
  解决方法：https://github.com/kubernetes/kubernetes/issues/48378

export KUBECONFIG=/etc/kubernetes/kubelet.conf
kubectl get nodes

但是这样会在离开此对话后失效，永久保存需要修改/etc/profile 或 .bashrc，这里我们修改 .bashrc

~#:echo export KUBECONFIG=/etc/kubernetes/kubelet.conf >> ~/.bashrc
~#:source ~/.bashrc

看似已经解决的样子，但是又遇到了新问题，/etc/kubernetes/kubelet.conf文件中user是默认生成的匿名格式，即system:name这样的方式，使用命令比如kubectl get all即报错Error from server (Forbidden)，原因是在kubeadm init结束后没有按照要求操作造成的。

kubeadm init成功提示

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

所以实际上安装成功后的操作应该是这样的

mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config
echo export KUBECONFIG=~/.kube/config>> ~/.bashrc
source ~/.bashrc

---