互联网服务Etcd

etcd 生成证书报错?启动报错

cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=kubernetes etcd-csr.json | cfssljson -bare etcd2020/10/14 20:36:23 [INFO] generate received request2020/10/14 20:36:23 [INFO] received CSR2020/10/14 20:36:23 [INFO] generatin...显示全部

cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=kubernetes etcd-csr.json | cfssljson -bare etcd

2020/10/14 20:36:23 [INFO] generate received request
2020/10/14 20:36:23 [INFO] received CSR
2020/10/14 20:36:23 [INFO] generating key: rsa-2048
2020/10/14 20:36:23 [INFO] encoded CSR
{"code":5100,"message":"Invalid policy: no key usage available"}
Failed to parse input: unexpected end of JSON input

cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=kubernetes etcd-csr.json | cfssljson -bare etcd

2020/10/14 21:09:42 [INFO] generate received request

2020/10/14 21:09:42 [INFO] received CSR

2020/10/14 21:09:42 [INFO] generating key: rsa-2048

2020/10/14 21:09:42 [INFO] encoded CSR

2020/10/14 21:09:42 [INFO] signed certificate with serial number 188241539030328105637594408316828070670732033511

2020/10/14 21:09:42 [WARNING] This certificate lacks a "hosts" field. This makes it unsuitable for

websites. For more information see the Baseline Requirements for the Issuance and Management

of Publicly-Trusted Certificates, v.1.1.6, from the CA/Browser Forum (https://cabforum.org);

specifically, section 10.2.3 ("Information Requirements").

systemctl start etcd

Job for etcd.service failed because a timeout was exceeded. See "systemctl status etcd.service" and "journalctl -xe" for details.

[root@k8s-m1 work]# journalctl -xe

Oct 14 22:40:01 k8s-m1 etcd[6618]: publish error: etcdserver: request timed out

Oct 14 22:40:02 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:02 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:02 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:02 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:03 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 35

Oct 14 22:40:03 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 36

Oct 14 22:40:03 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 36

Oct 14 22:40:03 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 36

Oct 14 22:40:03 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 36

Oct 14 22:40:05 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 36

Oct 14 22:40:05 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 37

Oct 14 22:40:05 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 37

Oct 14 22:40:05 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 37

Oct 14 22:40:05 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 37

Oct 14 22:40:07 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:07 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:07 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:07 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:08 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 37

Oct 14 22:40:08 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 38

Oct 14 22:40:08 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 38

Oct 14 22:40:08 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 38

Oct 14 22:40:08 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 38

Oct 14 22:40:10 k8s-m1 etcd[6618]: publish error: etcdserver: request timed out

Oct 14 22:40:10 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 38

Oct 14 22:40:10 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 39

Oct 14 22:40:10 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 39

Oct 14 22:40:10 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 39

Oct 14 22:40:10 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 39

Oct 14 22:40:12 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:12 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:12 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:12 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:12 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 39

Oct 14 22:40:12 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 40

Oct 14 22:40:12 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 40

Oct 14 22:40:12 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 40

Oct 14 22:40:12 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 40

Oct 14 22:40:16 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 40

Oct 14 22:40:16 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 41

Oct 14 22:40:16 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 41

Oct 14 22:40:16 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 41

Oct 14 22:40:16 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 41

Oct 14 22:40:17 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:17 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:17 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:17 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:18 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 41

Oct 14 22:40:18 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 42

Oct 14 22:40:18 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 42

Oct 14 22:40:18 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 42

Oct 14 22:40:18 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 42

Oct 14 22:40:19 k8s-m1 etcd[6618]: publish error: etcdserver: request timed out

Oct 14 22:40:21 k8s-m1 etcd[6618]: 888545246b042cc3 is starting a new election at term 42

Oct 14 22:40:21 k8s-m1 etcd[6618]: 888545246b042cc3 became candidate at term 43

Oct 14 22:40:21 k8s-m1 etcd[6618]: 888545246b042cc3 received MsgVoteResp from 888545246b042cc3 at term 43

Oct 14 22:40:21 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to 8a00337e8adb6bb5 at term 43

Oct 14 22:40:21 k8s-m1 etcd[6618]: 888545246b042cc3 [logterm: 1, index: 3] sent MsgVote request to e4165bfe98bdfa1e at term 43

Oct 14 22:40:22 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:22 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

Oct 14 22:40:22 k8s-m1 etcd[6618]: health check for peer e4165bfe98bdfa1e could not connect: dial tcp 192.168.111.182:2380: connect: connection refused (prober "ROUND_TRIPPER_SNAPSHOT")

Oct 14 22:40:22 k8s-m1 etcd[6618]: health check for peer 8a00337e8adb6bb5 could not connect: dial tcp 192.168.111.181:2380: connect: connection refused (prober "ROUND_TRIPPER_RAFT_MESSAGE")

收起
参与3

返回mtming333的回答

mtming333mtming333  系统架构师 , 某电子支付

检查ca-config.json格式,检查根证书

互联网服务 · 2020-10-16
浏览3211

回答者

mtming333
系统架构师某电子支付
擅长领域: 云计算容器容器云

mtming333 最近回答过的问题

回答状态

  • 发布时间:2020-10-16
  • 关注会员:2 人
  • 回答浏览:3211
  • X社区推广