异常信息：
[root@n1 kubernetes]# systemctl status kubelet -l ● kubelet.service - Kubernetes Kubelet Loaded: loaded (/etc/systemd/system/kubelet.service; enabled; vendor preset: disabled) Active: active (running) since 二 2022-08-02 19:31:38 CST; 42s ago Docs: https://github.com/GoogleCloudPlatform/kubernetes Main PID: 80509 (kubelet) Tasks: 9 Memory: 13.0M CGroup: /system.slice/kubelet.service └─80509 /usr/local/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/kubelet-bootstrap.kubeconfig --cert-dir=/etc/kubernetes/pki --kubecig=/etc/kubernetes/kubelet.kubeconfig --config=/etc/kubernetes/kubelet.config.json --network-plugin=cni --pod-infra-container-image=k8s.gcr.io/paused64:3.1 --allow-privileged=true --alsologtostderr=true --logtostderr=false --log-dir=/var/log/kubernetes --v=2 8月 02 19:32:01 n1 kubelet[80509]: I0802 19:32:01.240801 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:03 n1 kubelet[80509]: I0802 19:32:03.277292 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:05 n1 kubelet[80509]: I0802 19:32:05.531491 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:07 n1 kubelet[80509]: I0802 19:32:07.698197 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:09 n1 kubelet[80509]: I0802 19:32:09.946787 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:11 n1 kubelet[80509]: I0802 19:32:11.955601 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:14 n1 kubelet[80509]: I0802 19:32:14.092859 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:16 n1 kubelet[80509]: I0802 19:32:16.101928 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:18 n1 kubelet[80509]: I0802 19:32:18.293540 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:32:20 n1 kubelet[80509]: I0802 19:32:20.408899 80509 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials [root@n1 kubernetes]# journalctl -xef -u kubelet -- Logs begin at 二 2022-08-02 17:43:29 CST. -- 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.598616 80432 flags.go:33] FLAG: --version="false" 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.598635 80432 flags.go:33] FLAG: --vmodule="" 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.598645 80432 flags.go:33] FLAG: --volume-plugin-dir="/usr/libexec/kubernetes/kubelet-plugins/vol/exec/" 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.598656 80432 flags.go:33] FLAG: --volume-stats-agg-period="1m0s" 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.598737 80432 feature_gate.go:226] feature gates: &{map[]} 8月 02 19:28:22 n1 kubelet[80432]: Flag --allow-privileged has been deprecated, will be removed in a future version 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.602278 80432 feature_gate.go:226] feature gates: &{map[RotateKubeletClientCertificate:true RotatbeletServerCertificate:true]} 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.602390 80432 feature_gate.go:226] feature gates: &{map[RotateKubeletClientCertificate:true RotatbeletServerCertificate:true]} 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639153 80432 mount_linux.go:171] Detected OS with systemd 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639224 80432 server.go:417] Version: v1.14.0 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639304 80432 feature_gate.go:226] feature gates: &{map[RotateKubeletClientCertificate:true RotatbeletServerCertificate:true]} 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639400 80432 feature_gate.go:226] feature gates: &{map[RotateKubeletClientCertificate:true RotatbeletServerCertificate:true]} 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639516 80432 plugins.go:103] No cloud provider specified. 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639547 80432 server.go:533] No cloud provider specified: "" from the config file: "" 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.639593 80432 bootstrap.go:118] Using bootstrap kubeconfig to generate TLS client cert, key and kconfig file 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.645893 80432 bootstrap.go:149] No valid private key and/or certificate found, reusing existing pate key or creating a new one 8月 02 19:28:22 n1 kubelet[80432]: I0802 19:28:22.685746 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:28:24 n1 kubelet[80432]: I0802 19:28:24.912832 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:28:27 n1 kubelet[80432]: I0802 19:28:27.025950 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:28:29 n1 kubelet[80432]: I0802 19:28:29.403173 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:28:31 n1 kubelet[80432]: I0802 19:28:31.677202 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:28:33 n1 kubelet[80432]: I0802 19:28:33.738455 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials 8月 02 19:28:35 n1 kubelet[80432]: I0802 19:28:35.927611 80432 bootstrap.go:294] Failed to connect to apiserver: the server has asked for the clieto provide credentials
解决：
1.证书过期了导致链接不上。
2.可以看到 token 已经过期重新生成一下就可以了。
[root@m1 .kube]# kubeadm token list TOKEN TTL EXPIRES USAGES DESCRIPTION EXTRA GROUPS bwa8py.ghf5s0vfsxz1d7fx <invalid> 2022-08-01T19:06:15+08:00 authentication,signing kubelet-bootstrap-token system:bootstrappers:worker
