Kubernetes 错误403禁止度量服务器与节点连接

在我的集群中，我运行了v0.3.6。最近，我安装了v0.4.2版本，但新版本的pod在连接到节点时出现此错误：“403禁止”

我在版本1.17.17-gke.2800中使用Kubernetes

我已经尝试在标志中使用

--kubelet unsecure tls

，但没有成功

---

谢谢你的帮助

根据您提供的信息，看到出现的一些新POD存在问题，您可以尝试查看是否将您的工作负载（即封锁和排放节点）迁移到新节点池，以查看问题是否仍然存在

有关如何封锁和排空现有节点池的说明，请参见：

I0416 18:02:22.965541       1 secure_serving.go:197] Serving securely on [::]:4443
I0416 18:02:22.965652       1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController
I0416 18:02:22.965662       1 shared_informer.go:240] Waiting for caches to sync for RequestHeaderAuthRequestController
I0416 18:02:22.965698       1 dynamic_serving_content.go:130] Starting serving-cert::/tmp/apiserver.crt::/tmp/apiserver.key
I0416 18:02:22.965721       1 tlsconfig.go:240] Starting DynamicServingCertificateController
I0416 18:02:22.965814       1 configmap_cafile_content.go:202] Starting client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0416 18:02:22.965826       1 shared_informer.go:240] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0416 18:02:22.965841       1 configmap_cafile_content.go:202] Starting client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0416 18:02:22.965851       1 shared_informer.go:240] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
E0416 18:02:22.982587       1 server.go:132] unable to fully scrape metrics: [unable to fully scrape metrics from node $NODE_NAME1: unable to fetch metrics from node $NODE_NAME1: request failed - "403 Forbidden"., unable to fully scrape metrics from node $NODE_NAME2: unable to fetch metrics from node $NODE_NAME2: request failed - "403 Forbidden"., unable to fully scrape metrics from node $NODE_NAME3: unable to fetch metrics from node $NODE_NAME3: request failed - "403 Forbidden".]
I0416 18:02:23.065801       1 shared_informer.go:247] Caches are synced for RequestHeaderAuthRequestController 
I0416 18:02:23.065896       1 shared_informer.go:247] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file 
I0416 18:02:23.066144       1 shared_informer.go:247] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file