Lab 3.2 failed to list bootstrap tokens
Preface: I did successfully complete lab 3.1 just now.
I'm working through the exercises for lab 3.2 and when i try to run:
sudo kubeadm token list
an error occurs:
failed to list bootstrap tokens: Get "https://k8scp:6443/api/v1/namespaces/kube-system/secrets?fieldSelector=type%3Dbootstrap.kubernetes.io%2Ftoken": dial tcp 10.192.0.2:6443: connect: connection refused
also, any kubectl command ie kubectl get pods
gives the error
The connection to the server k8scp:6443 was refused - did you specify the right host or port?
Some troubleshooting I have tried:
hostname -i 10.192.0.2
cat /etc/hosts 127.0.0.1 localhost 10.192.0.2 k8scp
sudo lsof -i -P -n|grep LISTEN systemd-r 369 systemd-resolve 14u IPv4 15680 0t0 TCP 127.0.0.53:53 (LISTEN) container 441 root 14u IPv4 16388 0t0 TCP 127.0.0.1:37753 (LISTEN) kubelet 5790 root 30u IPv6 35214 0t0 TCP *:10250 (LISTEN) kubelet 5790 root 34u IPv4 35218 0t0 TCP 127.0.0.1:10248 (LISTEN) etcd 26744 root 7u IPv4 122779 0t0 TCP 10.192.0.2:2380 (LISTEN) etcd 26744 root 8u IPv4 122783 0t0 TCP 10.192.0.2:2379 (LISTEN) etcd 26744 root 9u IPv4 122784 0t0 TCP 127.0.0.1:2379 (LISTEN) etcd 26744 root 14u IPv4 122790 0t0 TCP 127.0.0.1:2381 (LISTEN) kube-sche 27279 root 7u IPv4 126097 0t0 TCP 127.0.0.1:10259 (LISTEN) kube-cont 27360 root 7u IPv4 126355 0t0 TCP 127.0.0.1:10257 (LISTEN)
I believe the control plane should be running on 6443 as per this page
Does this mean the control panel has stopped, and if so, how do I bring it back and make sure it doesn't stop again?
Comments
-
Hi @lwarlik,
Please run all 4 'student' user commands in step 24 of lab 3.1. This should resolve the kubectl CLI. In addition, please provide the output of:
kubectl get nodes -o wide
kubectl get pods -A -o wide
Regards,
-Chris0 -
Thanks for getting back to me.
I just ran those 4 commands of step 24 again.
kubectl get nodes -o wide NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME instance-1 NotReady control-plane 142m v1.24.1 10.192.0.2 <none> Ubuntu 22.04.1 LTS 5.15.0-1021-gcp containerd://1.5.9-0ubuntu3
So kubectl is working, then I tried
sudo kubeadm token list TOKEN TTL EXPIRES USAGES DESCRIPTION EXTRA GROUPS 73g7fq.3x8ksf9em94bsizv <invalid> 2022-10-31T14:48:12Z <none> Proxy for managing TTL for the kubeadm-certs secret <none> uigis7.g8cqreuegqj9n9fh 21h 2022-11-01T12:48:12Z authentication,signing <none> system:bootstrappers:kubeadm:default-node-token
Still working. Then I left my computer for 5 minutes, came back and tried
kubectl get pods -A -o wide The connection to the server k8scp:6443 was refused - did you specify the right host or port? kubectl get nodes -o wide The connection to the server k8scp:6443 was refused - did you specify the right host or port?
It looks like the service is running intermittently, is there anything that could be causing this?
0 -
Hi @lwarlik,
How did you provision your environment? Local hypervisor VMs or cloud instances? Did you happen to watch the video guides from the introductory chapter? They highlight key configuration options such as recommended instance sizes, OS, networking and firewall considerations.
Regards,
-Chris0 -
I'm running on google cloud platform. Must have skipped over that video guide because I didn't have the open network set up.
I've just gone through and set up the network, firewall, cp and worker nodes as per the guide. That allowed me to get through lab 3.2 and 3.3, but now when i try the first command of lab 3.4 the same error happens
kubectl create deployment nginx --image=nginx error: failed to create deployment: Post "https://k8scp:6443/apis/apps/v1/namespaces/default/deployments?fieldManager=kubectl-create&fieldValidation=Strict": dial tcp 10.2.0.4:6443: connect: connection refused
kubectl get nodes -o wide The connection to the server k8scp:6443 was refused - did you specify the right host or port?
I also just noticed that the commands work for a short while after restarting the instance before failing again.
0 -
Same, here i'm in Digital Ocean - spun up VMs and they seem to sporadically fail and work.
0 -
[email protected]:~$ kubectl get nodes -o wide
The connection to the server k8scp:6443 was refused - did you specify the right host or port?
[email protected]:~$ kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
ubuntu-s-4vcpu-8gb-nyc1-01-cp Ready control-plane 25m v1.24.1 10.116.0.2 Ubuntu 22.04.2 LTS 5.15.0-50-generic containerd://1.6.180 -
it appears stopping/starting the kubelet allowed me to more forward
systemctl stop kubelet.service
systemctl start kubelet.service
systemctl stop kubelet.service
kubeadm token list
TOKEN TTL EXPIRES USAGES DESCRIPTION EXTRA GROUPS
1h 2023-02-22T07:45:49Z Proxy for managing TTL for the kubeadm-certs secret
23h 2023-02-23T05:45:49Z authentication,signing system:bootstrappers:kubeadm:default-node-token0 -
Hi all,
I realized that "swapping" was enable after reboot.
I had to turn it off againsudo swapoff -a
Then, i check again.
free -msudo systemctl status kubelet.service
kubectl get nodes -o wide
0
Categories
- 9.9K All Categories
- 29 LFX Mentorship
- 82 LFX Mentorship: Linux Kernel
- 469 Linux Foundation Boot Camps
- 267 Cloud Engineer Boot Camp
- 95 Advanced Cloud Engineer Boot Camp
- 43 DevOps Engineer Boot Camp
- 31 Cloud Native Developer Boot Camp
- 1 Express Training Courses
- 1 Express Courses - Discussion Forum
- 1.6K Training Courses
- 18 LFC110 Class Forum
- 4 LFC131 Class Forum
- 19 LFD102 Class Forum
- 133 LFD103 Class Forum
- 9 LFD121 Class Forum
- 60 LFD201 Class Forum
- LFD210 Class Forum
- 1 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum
- 23 LFD254 Class Forum
- 545 LFD259 Class Forum
- 100 LFD272 Class Forum
- 1 LFD272-JP クラス フォーラム
- 1 LFS145 Class Forum
- 20 LFS200 Class Forum
- 739 LFS201 Class Forum
- 1 LFS201-JP クラス フォーラム
- 1 LFS203 Class Forum
- 37 LFS207 Class Forum
- 296 LFS211 Class Forum
- 53 LFS216 Class Forum
- 45 LFS241 Class Forum
- 39 LFS242 Class Forum
- 33 LFS243 Class Forum
- 10 LFS244 Class Forum
- 27 LFS250 Class Forum
- 1 LFS250-JP クラス フォーラム
- 131 LFS253 Class Forum
- 967 LFS258 Class Forum
- 10 LFS258-JP クラス フォーラム
- 85 LFS260 Class Forum
- 124 LFS261 Class Forum
- 29 LFS262 Class Forum
- 78 LFS263 Class Forum
- 15 LFS264 Class Forum
- 10 LFS266 Class Forum
- 17 LFS267 Class Forum
- 16 LFS268 Class Forum
- 14 LFS269 Class Forum
- 194 LFS272 Class Forum
- 1 LFS272-JP クラス フォーラム
- 207 LFW211 Class Forum
- 148 LFW212 Class Forum
- 892 Hardware
- 213 Drivers
- 74 I/O Devices
- 44 Monitors
- 115 Multimedia
- 206 Networking
- 100 Printers & Scanners
- 85 Storage
- 747 Linux Distributions
- 88 Debian
- 64 Fedora
- 13 Linux Mint
- 13 Mageia
- 24 openSUSE
- 133 Red Hat Enterprise
- 33 Slackware
- 13 SUSE Enterprise
- 354 Ubuntu
- 469 Linux System Administration
- 38 Cloud Computing
- 68 Command Line/Scripting
- Github systems admin projects
- 93 Linux Security
- 77 Network Management
- 107 System Management
- 48 Web Management
- 62 Mobile Computing
- 22 Android
- 26 Development
- 1.2K New to Linux
- 1.1K Getting Started with Linux
- 524 Off Topic
- 127 Introductions
- 210 Small Talk
- 19 Study Material
- 783 Programming and Development
- 257 Kernel Development
- 492 Software Development
- 919 Software
- 255 Applications
- 181 Command Line
- 2 Compiling/Installing
- 76 Games
- 316 Installation
- 46 All In Program
- 46 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)