Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x509: certificate is valid for 10.233.0.1, 172.20.0.251, #6118

Closed
lisqorz opened this issue Jun 12, 2024 · 2 comments
Closed

x509: certificate is valid for 10.233.0.1, 172.20.0.251, #6118

lisqorz opened this issue Jun 12, 2024 · 2 comments
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@lisqorz
Copy link

lisqorz commented Jun 12, 2024

step by step here
https://www.kubesphere.io/zh/docs/v3.4/installing-on-linux/public-cloud/install-kubesphere-on-ali-ecs/

Describe the Bug
image

Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2

Versions Used
KubeSphere:3.4.1
Kubernetes: v1.22.12

Environment
How many nodes and their hardware configuration:
Alibaba Cloud Linux 2.1903 LTS 64位 等保2.0三级版 4cpu/8g

**Steps to reproduce the behavior: **

  1. ./kk create cluster -f config-sample.yaml

Expected behavior
16:46:10 CST [AutoRenewCertsModule] Generate k8s certs renew script
16:46:10 CST success: [node3]
16:46:10 CST [AutoRenewCertsModule] Generate k8s certs renew service
16:46:10 CST success: [node3]
16:46:10 CST [AutoRenewCertsModule] Generate k8s certs renew timer
16:46:10 CST success: [node3]
16:46:10 CST [AutoRenewCertsModule] Enable k8s certs renew service
16:46:10 CST success: [node3]
16:46:10 CST [SaveKubeConfigModule] Save kube config as a configmap
16:46:10 CST message: [LocalHost]
Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2
16:46:10 CST retry: [LocalHost]
16:46:15 CST message: [LocalHost]
Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2
16:46:15 CST retry: [LocalHost]
16:46:20 CST message: [LocalHost]
Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2
16:46:20 CST retry: [LocalHost]
16:46:25 CST message: [LocalHost]
Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2
16:46:25 CST retry: [LocalHost]
16:46:30 CST message: [LocalHost]
Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2
16:46:30 CST failed: [LocalHost]
error: Pipeline[CreateClusterPipeline] execute failed: Module[SaveKubeConfigModule] exec failed:
failed: [LocalHost] [SaveKubeConfig] exec failed after 5 retries: Get "https://116.62.163.2:6443/api/v1/namespaces/kubekey-system": x509: certificate is valid for 10.233.0.1, 172.20.0.251, 127.0.0.1, not 116.62.163.2

@lisqorz lisqorz added the kind/bug Categorizes issue or PR as related to a bug. label Jun 12, 2024
@lisqorz
Copy link
Author

lisqorz commented Jun 12, 2024

https://www.kubesphere.io/zh/docs/v3.4/installing-on-linux/public-cloud/install-kubesphere-on-ali-ecs/
按照这个教程安装的,执行完 ./kk create cluster -f config-sample.yaml 之后报这个错误

@ygqygq2
Copy link

ygqygq2 commented Jun 14, 2024

你负载均衡那把 SLB IP写进去就行了,别删除它的那个域名。它内部就是使用这个域名绑定你的 SLB IP 的

@lisqorz lisqorz closed this as completed Jun 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

No branches or pull requests

2 participants