billions-london-49866
10/17/2022, 9:15 AMcool-thailand-26552
10/17/2022, 9:15 AMclean-ghost-11464
worried-electrician-89379
10/18/2022, 8:03 AMastonishing-stone-14417
10/19/2022, 8:55 AMrapid-van-91305
10/19/2022, 9:19 AMrapid-van-91305
10/19/2022, 9:25 AMworried-electrician-89379
10/20/2022, 1:51 PMworried-electrician-89379
10/20/2022, 1:51 PMworried-electrician-89379
10/20/2022, 1:52 PMrapid-van-91305
10/20/2022, 1:53 PMrapid-van-91305
10/20/2022, 1:54 PMcolossal-machine-43699
10/27/2022, 8:31 PME1027 20:24:29.009588 1 controller.go:317] controller/kubeadmcontrolplane "msg"="Reconciler error" "error"="failed to create remote cluster client: error creating client and cache for remote cluster: error creating dynamic rest mapper for remote cluster \"default/my-cluster\": Get \"<https://10.84.81.6:6443/api?timeout=10s>\": x509: certificate signed by unknown authority" "name"="my-cluster" "namespace"="default" "reconciler group"="<http://controlplane.cluster.x-k8s.io|controlplane.cluster.x-k8s.io>" "reconciler kind"="KubeadmControlPlane"
The self-signed root is mounted via the standard kube-root-ca.crt
configmap.
Volumes: │
│ cert: │
│ Type: Secret (a volume populated by a Secret) │
│ SecretName: capi-kubeadm-control-plane-webhook-service-cert │
│ Optional: false │
│ kube-api-access-zn7qg: │
│ Type: Projected (a volume that contains injected data from multiple sources) │
│ TokenExpirationSeconds: 3607 │
│ ConfigMapName: kube-root-ca.crt │
│ ConfigMapOptional: <nil> │
│ DownwardAPI: true │
│ QoS Class: BestEffort │
│ Node-Selectors: <none> │
│ Tolerations: <http://node-role.kubernetes.io/control-plane:NoSchedule|node-role.kubernetes.io/control-plane:NoSchedule> │
│ <http://node-role.kubernetes.io/master:NoSchedule|node-role.kubernetes.io/master:NoSchedule> │
│ <http://node.kubernetes.io/not-ready:NoExecute|node.kubernetes.io/not-ready:NoExecute> op=Exists for 300s │
│ <http://node.kubernetes.io/unreachable:NoExecute|node.kubernetes.io/unreachable:NoExecute> op=Exists for 300s
But kube-api-access doesn't seem to make use of it.rapid-van-91305
11/03/2022, 11:24 AMrapid-van-91305
11/03/2022, 11:25 AMcareful-piano-35019
11/03/2022, 12:35 PMcool-thailand-26552
11/09/2022, 12:29 PMRKE2Xxxx
instead of Rke2Xxxx
, this is not yet committed, so please let me know if you do not agree.astonishing-stone-14417
11/09/2022, 4:25 PMcool-thailand-26552
11/11/2022, 10:42 AMconst (
KernelDefaultsProtectionEnabled KernelDefaultsProtectionPolicy = "enabled"
KernelDefaultsProtectionDisabled KernelDefaultsProtectionPolicy = "disabled"
)
const (
EtcdMetricsEnabled EtcdMetricsExposurePolicy = "enabled"
EtcdMetricsDisabled EtcdMetricsExposurePolicy = "disabled"
)
Is this overkill, or is it how it should be ?rapid-van-91305
11/14/2022, 11:47 AMrapid-van-91305
11/14/2022, 11:48 AMastonishing-stone-14417
11/14/2022, 12:09 PMcool-thailand-26552
11/14/2022, 12:58 PMrapid-van-91305
11/14/2022, 12:59 PMastonishing-stone-14417
11/14/2022, 1:05 PMrapid-van-91305
11/14/2022, 1:13 PMastonishing-stone-14417
11/14/2022, 1:20 PMcool-thailand-26552
11/14/2022, 1:33 PMcool-thailand-26552
11/14/2022, 1:36 PMcool-thailand-26552
11/15/2022, 11:45 AM