Can't start skydns

Question

I am trying to install kubernetes on ubutnu (installation without iron). I install one master and one node, and it looks great. I installed the ui addon without any problems, but when I tried to install the dns addon, reboot it myself.

in kube-apiserver logs i get:

E1218 12:56:15.298118 5 handlers.go:37] Unable to authenticate the request due to an error: crypto/rsa: verification error I1218 12:56:15.298220 5 handlers.go:131] GET /api/v1/services: (534.467µs) 401 [[kube2sky/v0.20.2 (linux/amd64) kubernetes/unknown] 172.27.35.39:33013] E1218 12:56:15.298396 5 handlers.go:37] Unable to authenticate the request due to an error: crypto/rsa: verification error I1218 12:56:15.298469 5 handlers.go:131] GET /api/v1/endpoints: (493.5µs) 401 [[kube2sky/v0.20.2 (linux/amd64) kubernetes/unknown] 172.27.35.39:33014] I1218 12:56:16.001321 5 handlers.go:131] GET /healthz: (83.326µs) 0 [[Go 1.1 package http] 127.0.0.1:42096] E1218 12:56:16.303274 5 handlers.go:37] Unable to authenticate the request due to an error: crypto/rsa: verification error E1218 12:56:16.303274 5 handlers.go:37] Unable to authenticate the request due to an error: crypto/rsa: verification error 

And in the kube2sky container log, the following errors occur:

 E1218 12:57:51.713651 1 reflector.go:136] Failed to list *api.Service: the server has asked for the client to provide credentials (get services) E1218 12:57:51.713850 1 reflector.go:136] Failed to list *api.Endpoints: the server has asked for the client to provide credentials (get endpoints) 

It looks like I have a problem with the service account and token, but I looked at the kube2sky instance and I see that I have a token in the /tmp/secrets/kubernetes.io/serviceaccount directory, and ca.crt is correct cluster ca

I use: ubuntu 14.04 kubernet 1.1.2 add I am trying to create a dns addon from the addon kubernetes 1.1.2 directory

Answer 1

I had the same problem after updating the certificate and api server key. I fixed the DNS service after deleting the secret file:

 # Search the secret name kubectl get pod --namespace=kube-system -l k8s-app=kube-dns -o yaml | grep -A1 serviceaccount # Delete the current secret kubectl delete secret/<name-of-the-secret> --namespace=kube-system 

I also need to reload the entire POD, I don't know if there is a better approach:

 kubectl delete svc/kube-dns rc/kube-dns-v9 --namespace=kube-system kubectl create -f dns-addon.yaml 

Answer 2

As I understand it, this is not a problem with skydns, but rather with Kubernett itself. If I put this rc / service in any other namespace, it works fine. I had this problem with 1.1.4 Kubernetes