heapster部署遇到錯誤

錯誤一:
Error in scraping containers from kubelet_summary:192.168.xx.xxx:10255: Get http://192.168.xx.xxx:10255/stats/summary/: dial tcp 192.168.xx.xxx:10255: getsockopt: connection refused
W0425 09:14:25.000355 1 manager.go:152] Failed to get all responses in time (got 0/1)

#在heapster.yaml清單文件中進行如下修改

錯誤二:
W0703 10:28:25.000491 1 manager.go:152] Failed to get all responses in time (got 0/1)
I0703 10:28:25.013285 1 influxdb.go:274] Created database "k8s" on influxDB server at "monitoring-influxdb.kube-system.svc:8086"
E0703 10:29:05.005431 1 manager.go:101] Error in scraping containers from kubelet:192.168.xx.xxx:10250: failed to get all container stats from Kubelet URL "https://192.168.xx.xxx:10250/stats/container/": request failed - "403 Forbidden", response: "Forbidden (user=system:serviceaccount:kube-system:heapster, verb=create, resource=nodes, subresource=stats)

解決方法:
查看ClusterRole: system:heapster的權限,發現的確沒有針對Resource: nodes/stats 的create權限
#kubectl describe clusterrole system:heapster
生成清單文件
#kubectl get clusterrole system:heapster -o yaml > heapster_modify.yaml
#kubectl delete -f heapster_modify.yaml
#kubectl apply -f heapster_modify.yaml
#kubectl delete -f heapster.yaml
#kubectl apply -f heapster.yaml

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章