Kubernetes 舵ls失败，超过超时/上下文截止时间

helm3也给出了空列表

$ helm2 version --debug

Client: &version.Version{SemVer:"v2.16.10", 
GitCommit:"bceca24a91639f045f22ab0f41e47589a932cf5e", GitTreeState:"clean"}
[debug] Created tunnel using local port: '34073'

[debug] SERVER: "127.0.0.1:34073"

Kubernetes: &version.Info{Major:"1", Minor:"15+", GitVersion:"v1.15.11-eks-14f01f", GitCommit:"14f01fe8f04411d5e187b220034ca2117d79f7de", GitTreeState:"clean", BuildDate:"2020-05-23T21:32:47Z", GoVersion:"go1.12.17", Compiler:"gc", Platform:"linux/amd64"}

127.0.0.1:34073[debug] context deadline exceeded
Error: cannot connect to Tiller

(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default）
编码 大师[！？]
➜ k get pods-n kube系统|格雷普耕耘机
tiller-deploy-69849bbd9-9lw6z 1/1运行0 31d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default）
编码 大师[！？]
➜ k get部署-n kube系统| grep tiller
舵柄部署1/1402D
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default）
编码 大师[！？]
➜ k get sa-n kube系统| grep tiller
舵柄1402D
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default）
编码 大师[！？]
➜ k get clusterrole-n kube系统| grep tiller
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default）
编码 大师[！？]
➜ k get clusterrolebinding-n kube系统|格雷普耕耘机
舵柄402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default）
编码 大师[！？]
➜ k获取服务-n kube系统|格雷普耕耘机
舵柄部署群集IP 10.100.23.25 44134/TCP 402d

解决方案

原来tiller部署了需要通过的SSL证书

~/Development/tools/helm-2.14.2/helm列表\
--舵柄连接超时30\
--tls\
--tls ca证书ssl/tiller/tiller-ca.crt\
--tls证书ssl/tiller/tiller.crt\
--tls密钥ssl/tiller/tiller.key\
--全部\
--分蘖分蘖系统

要获得证书，您必须执行以下操作：

(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get pods -n kube-system | grep tiller                                     
tiller-deploy-69849bbd9-9lw6z           1/1     Running   0          31d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get deployments -n kube-system | grep tiller
tiller-deploy          1/1     1            1           402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get sa -n kube-system | grep tiller  
tiller                               1         402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get clusterrole -n kube-system | grep tiller
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get clusterrolebinding -n kube-system | grep tiller
tiller                                                 402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get service -n kube-system | grep tiller           
tiller-deploy          ClusterIP   10.100.23.25     <none>        44134/TCP       402d

(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get pods -n kube-system | grep tiller                                     
tiller-deploy-69849bbd9-9lw6z           1/1     Running   0          31d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get deployments -n kube-system | grep tiller
tiller-deploy          1/1     1            1           402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get sa -n kube-system | grep tiller  
tiller                               1         402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get clusterrole -n kube-system | grep tiller
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get clusterrolebinding -n kube-system | grep tiller
tiller                                                 402d
(⎈ |arn:aws:eks:eu-central-1:xxx:cluster/xxx:default)
code on  master [!?] 
➜ k get service -n kube-system | grep tiller           
tiller-deploy          ClusterIP   10.100.23.25     <none>        44134/TCP       402d

export TILLER_NAMESPACE="kube-system"

kubectl get secrets/tiller-secret -n "$TILLER_NAMESPACE" -o "jsonpath={.data['ca\.crt']}" | base64 --decode > ssl/tiller/tiller-ca.crt
kubectl get secrets/tiller-secret -n "$TILLER_NAMESPACE" -o "jsonpath={.data['tls\.crt']}" | base64 --decode > ssl/tiller/tiller.crt
kubectl get secrets/tiller-secret -n "$TILLER_NAMESPACE" -o "jsonpath={.data['tls\.key']}" | base64 --decode > ssl/tiller/tiller.key