2023年6月26日发(作者：)

kubernetes集群的安装异常汇总kubernetes集群⼆进制⽂件安装⽅式过程中，出现的异常汇总异常【kubelet cgroup driver：cgroupfs跟docker cgroup driver：systemd不⼀致】异常描述error: failed to run Kubelet: failed to create kubelet: misconfiguration: kubelet cgroup driver: "cgroupfs" isdifferent from docker cgroup driver: "systemd"启动kubelet时#启动kubeletservice kubelet start#查看kubelet⽇志journalctl -f -u kubelet提⽰如下错误10⽉ 11 20:05:18 server03 kubelet[15984]: error: failed to run Kubelet: failed to create kubelet: misconfiguration: kubelet cgroup driver: "cgroupfs" is different from docker

10⽉ 11 20:05:18 server03 systemd[1]: e: main process exited, code=exited, status=1/FAILURE10⽉ 11 20:05:18 server03 systemd[1]: Unit e entered failed state.10⽉ 11 20:05:18 server03 systemd[1]: e failed.原因分析kubelet⽂件驱动默认cgroupfs, ⽽我们安装的docker使⽤的⽂件驱动是systemd, 造成不⼀致, 导致镜像⽆法启动。现在有两种⽅式, ⼀种是修改docker, 另⼀种是修改kubelet。我这⾥采⽤修改docker的⽅式==注意==：⽹上⼤部分教程都是说直接修改#修改 /etc/docker/#添加如下属性"exec-opts": [ "driver=systemd"]这样会导致修改后，docker⽆法启动成功，提⽰与/lib/systemd/system/e中driver=systemd重复存在。解决⽅案（修改docker）# 修改前查看docker Cgroup Driver[root@server02 ~]# Server Version: 1.13.1Storage Driver: overlay2 Backing Filesystem: xfs Supports d_type: true Native Overlay Diff: trueLogging Driver: journaldCgroup Driver: # 修改evi /lib/systemd/system/e找到--exec-opt driver=systemd 修改为：--exec-opt driver=cgroupfs # 重启dockersystemctl daemon-reloadsystemctl restart docker# 修改后查看docker Cgroup Driver[root@server03 sysconfig]# Server Version: 1.13.1Storage Driver: overlay2 Backing Filesystem: xfs Supports d_type: true Native Overlay Diff: trueLogging Driver: journaldCgroup Driver: 异常【Failed to get system container stats for e】异常描述failed to get container info for "//e": unknown container"//e"启动kubelet时service kubelet start#查看kubelet⽇志journalctl -f -u kubelet提⽰如下错误10⽉ 11 19:37:46 server01 kubelet[64872]: E1011 19:37:46.150198 64872 :92] Failed to get system container stats for "//e": failed解决⽅案# 修改evi /lib/systemd/system/e#在ExecStart位置最后⾯，添加如下配置--runtime-cgroups=/systemd/ --kubelet-cgroups=/systemd/修改后的/lib/systemd/system/e[Unit]Description=Kubernetes KubeletDocumentation=/GoogleCloudPlatform/kubernetesAfter=eRequires=e[Service]WorkingDirectory=/var/lib/kubeletExecStart=/opt/modules/kubernetes-bins/kubelet --address=192.168.1.188 --hostname-override=192.168.1.188 --pod-infra-container-image=/imooc/pause-amd64:3.0 --kubeconfig=/etc/kubernetes/nfig --network-plugin=cni --cni-conf-dir=/etc/cni/net.d --cni-bin-dir=/opt/modules/kubernetes-bins --cluster-dns=10.68.0.2 --cluster-domain=. --allow-privileged=true --fail-swap-on=false --logtostderr=true --v=2 --runtime-cgroups=/systemd/ --kubelet-cgroups=/systemd/#kubelet cAdvisor 默认在所有接⼝监听 4194 端⼝的请求, 以下iptables限制内⽹访问ExecStartPost=/sbin/iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 4194 -j ACCEPTExecStartPost=/sbin/iptables -A INPUT -s 172.16.0.0/12 -p tcp --dport 4194 -j ACCEPTExecStartPost=/sbin/iptables -A INPUT -s 192.168.0.0/16 -p tcp --dport 4194 -j ACCEPTExecStartPost=/sbin/iptables -A INPUT -p tcp --dport 4194 -j DROPRestart=on-failureRestartSec=5[Install]WantedBy=