CSR Kubernetes 未颁发证书
我在这里遇到同样的问题:Approved Kubernetes CSR, butcertificate not 尽管状态为“已批准”,但 .status.certificate中
未颁发任何证书。仅当我使用certificates.k8s.io/v1时才会出现此问题,但当我使用certificates.k8s.io/v1beta1时会颁发证书。我已经添加了 /O=system:nodes/CN=system:node:mypod.svc 但仍然没有颁发证书。这是我的 CSR 示例。
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
name: mypod.default
spec:
groups:
- system:authenticated
- system:nodes
request: $(cat server.csr | base64 | tr -d '\n')
signerName: kubernetes.io/kubelet-serving
usages:
- digital signature
- key encipherment
- server auth
EOF
I encounter the same issue here: Approved Kubernetes CSR, but certificate not shown in status
No certificate was issued in .status.certificate though the status is "Approved". This issue only occurs when I use certificates.k8s.io/v1 but certificate is issued when I use certificates.k8s.io/v1beta1. I have already followed adding /O=system:nodes/CN=system:node:mypod.svc but still no certificate is issued. Here is the sample of my CSR.
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
name: mypod.default
spec:
groups:
- system:authenticated
- system:nodes
request: $(cat server.csr | base64 | tr -d '\n')
signerName: kubernetes.io/kubelet-serving
usages:
- digital signature
- key encipherment
- server auth
EOF
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论