はまりました、、
出たエラー
作ったクラスターに何かdepolymentを作る時に、
ContainerCreating
状態でストップし、
kubectl describe pod <pod name>
とすると、
以下のようなエラーが吐き出されていた、
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 30s default-scheduler Successfully assigned kube-system/coredns-f9fd979d6-9gqqt to linux
Warning FailedCreatePodSandBox 27s kubelet Failed to create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "de129c92e3eb25049f135c10d868da7e7f8dc1cf7f36a6a5dd92591b1ecfd54c" network for pod "coredns-f9fd979d6-9gqqt": networkPlugin cni failed to set up pod "coredns-f9fd979d6-9gqqt_kube-system" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes"), failed to clean up sandbox container "de129c92e3eb25049f135c10d868da7e7f8dc1cf7f36a6a5dd92591b1ecfd54c" network for pod "coredns-f9fd979d6-9gqqt": networkPlugin cni failed to teardown pod "coredns-f9fd979d6-9gqqt_kube-system" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")]
Normal SandboxChanged 11s (x3 over 26s) kubelet Pod sandbox changed, it will be killed and re-created.
ちなみにこの時、
kubectl get pods --namespace=kube-system
を実行した際、coredns pods が同様にContainerCreating
でストップしていました。
このエラーは、結局
https://www.jianshu.com/p/3a46fff9d21d
これを見て解決した、
kubectl apply -f https://docs.projectcalico.org/v3.11/manifests/calico.yaml