4220182

x509: subject with cn=system:kube-controller-manager is not in the allowed list: []

10

按照： 09-4.metrics-server插件这篇说明 ，在增加kube-apiserver.service 增加以下： ``` --requestheader-client-ca-file=/etc/kubernetes/cert/ca.pem --requestheader-allowed-names="" --requestheader-extra-headers-prefix="X-Remote-Extra-" --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --proxy-client-cert-file=/etc/kubernetes/cert/metrics-server.pem --proxy-client-key-file=/etc/kubernetes/cert/metrics-server-key.pem --runtime-config=api/all=true ``` kube-controllr-manager.service 增加： ``` --horizontal-pod-autoscaler-use-rest-clients=true ``` 重启apiserver和controller-manager之后，在kube-apiserver的日志一直有错误（x509)： ``` Jun 29 03:04:23test-01 kube-apiserver[28047]: I0629 03:04:23.241329 28047 wrap.go:42] GET...