缺少kubernetes默认API资源定义_Kubernetes

缺少kubernetes默认API资源定义

kubernetes

缺少kubernetes默认API资源定义,kubernetes,Kubernetes,在尝试运行的过程中，我遇到了以下错误： $ kubectl version Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.2", GitCommit:"59603c6e503c87169aea6106f57b9f242f64df89", GitTreeState:"clean", BuildDate:"2020-01-21T22:17:28Z", GoVersion:"go1.13.5", Compil

在尝试运行的过程中，我遇到了以下错误：

$ kubectl version
Client Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.2", GitCommit:"59603c6e503c87169aea6106f57b9f242f64df89", GitTreeState:"clean", BuildDate:"2020-01-21T22:17:28Z", GoVersion:"go1.13.5", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.6", GitCommit:"7015f71e75f670eb9e7ebd4b5749639d42e20079", GitTreeState:"clean", BuildDate:"2019-11-13T11:11:50Z", GoVersion:"go1.12.12", Compiler:"gc", Platform:"linux/amd64"}

运行

kubectl api resources

会生成资源定义，除了
MutatingWebhookConfiguration
、
ValidatingWebhookConfiguration
和
CertificateSigningRequest
我已经浏览了我的shell历史记录，没有看到我会删除这些资源的行（如果可能的话）。这是怎么回事？是否有办法重新创建这些定义，所有依赖这些定义的内部服务是否都能正常恢复
yaml文件：

unable to recognize "reproduce.yaml": no matches for kind "MutatingWebhookConfiguration" in version "admissionregistration.k8s.io/v1beta1" unable to recognize "reproduce.yaml": no matches for kind "ValidatingWebhookConfiguration" in version "admissionregistration.k8s.io/v1beta1"
编辑：根据评论，是的，两个webhook都是通过
--启用许可插件
标志启用的。在
ps
中找到完整的kube apiserver:

--- apiVersion: admissionregistration.k8s.io/v1beta1 kind: MutatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from-secret: logs/cert-manager-webhook-tls labels: app: webhook app.kubernetes.io/instance: cert-manager app.kubernetes.io/managed-by: skaffold-v1.3.1 app.kubernetes.io/name: webhook skaffold.dev/builder: local skaffold.dev/cleanup: "true" skaffold.dev/deployer: kustomize skaffold.dev/docker-api-version: "1.40" skaffold.dev/run-id: a4c99b76-7a04-41c3-b1c7-ea74f8b2ec83 skaffold.dev/tag-policy: git-commit skaffold.dev/tail: "true" name: cert-manager-webhook webhooks: - clientConfig: service: name: cert-manager-webhook namespace: cert-manager path: /mutate failurePolicy: Fail name: webhook.cert-manager.io rules: - apiGroups: - cert-manager.io - acme.cert-manager.io apiVersions: - v1alpha2 operations: - CREATE - UPDATE resources: - '*/*' sideEffects: None --- apiVersion: admissionregistration.k8s.io/v1beta1 kind: ValidatingWebhookConfiguration metadata: annotations: cert-manager.io/inject-ca-from-secret: logs/cert-manager-webhook-tls labels: app: webhook app.kubernetes.io/instance: cert-manager app.kubernetes.io/managed-by: skaffold-v1.3.1 app.kubernetes.io/name: webhook skaffold.dev/builder: local skaffold.dev/cleanup: "true" skaffold.dev/deployer: kustomize skaffold.dev/docker-api-version: "1.40" skaffold.dev/run-id: a4c99b76-7a04-41c3-b1c7-ea74f8b2ec83 skaffold.dev/tag-policy: git-commit skaffold.dev/tail: "true" name: cert-manager-webhook webhooks: - clientConfig: service: name: cert-manager-webhook namespace: cert-manager path: /mutate failurePolicy: Fail name: webhook.cert-manager.io namespaceSelector: matchExpressions: - key: cert-manager.io/disable-validation operator: NotIn values: - "true" - key: name operator: NotIn values: - logs rules: - apiGroups: - cert-manager.io - acme.cert-manager.io apiVersions: - v1alpha2 operations: - CREATE - UPDATE resources: - '*/*' sideEffects: None

我看到kops准备了一个小版本更新，并决定这是“重新启动”集群的最佳方式。请注意，升级后这三种资源再次出现

我不知道这是怎么发生的，而且似乎没有其他人经历过这个问题。非常感谢@DT。提供了一些很好的故障排除指针。
注意：--许可控制在1.10中被弃用，并被--enable准入插件取代。。。kubeapi服务器吊舱的标志是否正确
Command:kube-apiserver--advision address=x.x.x.x--allow-privileged=true--authorization mode=Node，RBAC--client-ca-file=/etc/kubernetes/pki/ca.crt--enable-acmission-plugins=NodeRestriction
您是否尝试过降级kubectl客户端版本以匹配服务器版本！！或者更新您的yaml以使用
admissionregistration.k8s.io/v1
和
admissionregistration.k8s.io/v1
而不是beta>确保Kubernetes群集至少与v1.16（使用admissionregistration.k8s.io/v1）或v1.9（使用admissionregistration.k8s.io/v1beta1）一样新）因此，我认为您的问题在于所使用的客户端版本。您是否可以将其降级以匹配服务器版本。是否列出了v1和v1beta1以供部署？当您运行
$kubectl api versions | grep-i admissionregistration
>admissionregistration.k8s.io/v1>admissionregistration.k8s.io/v1beta1时，可以从客户端运行此命令，也可以直接从群集主机运行此命令，以提供更多提示。@DT。谢谢你的帮助。请看下面我自己的答案。由于问题已经解决，我不能再给你细节了。你的问题让我想到，也许在某个地方api服务器功能被禁用了，重新启动可能会修复它。太好了：）。。修复之父>重新启动。
/usr/local/bin/kube-apiserver \ --allow-privileged=true \ --anonymous-auth=false \ --apiserver-count=3 \ --authorization-mode=RBAC \ --basic-auth-file=/srv/kubernetes/basic_auth.csv \ --bind-address=0.0.0.0 \ --client-ca-file=/srv/kubernetes/ca.crt \ --cloud-provider=aws \ --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,NodeRestriction,ResourceQuota \ --etcd-cafile=/etc/kubernetes/pki/kube-apiserver/etcd-ca.crt \ --etcd-certfile=/etc/kubernetes/pki/kube-apiserver/etcd-client.crt \ --etcd-keyfile=/etc/kubernetes/pki/kube-apiserver/etcd-client.key \ --etcd-servers-overrides=/events#https://127.0.0.1:4002 \ --etcd-servers=https://127.0.0.1:4001 \ --insecure-bind-address=127.0.0.1 \ --insecure-port=8080 \ --kubelet-client-certificate=/srv/kubernetes/kubelet-api.pem \ --kubelet-client-key=/srv/kubernetes/kubelet-api-key.pem \ --kubelet-preferred-address-types=InternalIP,Hostname,ExternalIP \ --oidc-client-id=..... \ --oidc-issuer-url=..... \ --proxy-client-cert-file=/srv/kubernetes/apiserver-aggregator.cert \ --proxy-client-key-file=/srv/kubernetes/apiserver-aggregator.key \ --requestheader-allowed-names=aggregator \ --requestheader-client-ca-file=/srv/kubernetes/apiserver-aggregator-ca.cert \ --requestheader-extra-headers-prefix=X-Remote-Extra- \ --requestheader-group-headers=X-Remote-Group \ --requestheader-username-headers=X-Remote-User \ --secure-port=443 \ --service-cluster-ip-range=..... \ --storage-backend=etcd3 \ --tls-cert-file=/srv/kubernetes/server.cert \ --tls-private-key-file=/srv/kubernetes/server.key \ --token-auth-file=/srv/kubernetes/known_tokens.csv \ --v=2 \ --logtostderr=false \ --alsologtostderr \ --log-file=/var/log/kube-apiserver.log