Failed to start kubelet and kube-proxy if TLS is disabled

Bug #1792663 reported by Debo Zhang
20
This bug affects 4 people
Affects Status Importance Assigned to Milestone
magnum (Ubuntu)
Confirmed
Undecided
Debo Zhang

Bug Description

Use fedora-atomic-20180419, disable TLS, and then deploy a kubernetes cluster. Kubelet and kube-proxy started failed.

For kube-proxy, error message is as follows:
invalid configuration: [unable to read client-cert /etc/kubernetes/certs/proxy.crt for kube-proxy due to open /etc/kubernetes/certs/proxy.crt: no such file or directory, unable to read client-key /etc/kubernetes/certs/proxy.key for kube-proxy due to open /etc/kubernetes/certs/proxy.key: no such file or directory, unable to read certificate-authority /etc/kubernetes/certs/ca.crt for kubernetes due to open /etc/kubernetes/certs/ca.crt: no such file or directory]

For kubelet, error message is as follows:
unable to load client CA file /etc/kubernetes/certs/ca.crt: open /etc/kubernetes/certs/ca.crt: no such file or directory

Changed in magnum (Ubuntu):
assignee: nobody → Debo Zhang (laun-zhangdebo)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in magnum (Ubuntu):
status: New → Confirmed
Revision history for this message
Debo Zhang (laun-zhangdebo) wrote :

I have fixed this bug, please review:
https://review.openstack.org/#/c/602283/

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.