k8s-master03加入集群失败解决方法之一

云和数据.ChenGuang2025-08-01 15:15

#设置etcd版本

$ export ETCDCTL_API=3

#查看 etcd 集群成员列表

etcdctl --cacert="/etc/kubernetes/pki/etcd/ca.crt" --cert="/etc/kubernetes/pki/etcd/server.crt" --key="/etc/kubernetes/pki/etcd/server.key" member list

5c464663bfe0fb08, started, k8s-master01, https://192.168.XX.X1:2380, https://192.168.XX.X1:2379, false

8164c6e8e41efd3d, started, k8s-master02, https://192.168.XX.X2:2380, https://192.168.XX.X2:2379, false

bd53c1cba61d0cb6, started, k8s-master03, https://192.168.XX.X3:2380, https://192.168.XX.X3:2379, false

删除 etcd 集群成员 k8s-master02

etcdctl --cacert="/etc/kubernetes/pki/etcd/ca.crt" --cert="/etc/kubernetes/pki/etcd/server.crt" --key="/etc/kubernetes/pki/etcd/server.key" member remove bcf186e3a810ead,

#提示如下内容则说明删除成功

Member 8164c6e8e41efd3d removed from cluster ee7981bace12ae411

再次查看 etcd 集群成员列表

$ etcdctl --cacert="/etc/kubernetes/pki/etcd/ca.crt" --cert="/etc/kubernetes/pki/etcd/server.crt" --key="/etc/kubernetes/pki/etcd/server.key" member list

5c464663bfe0fb08, started, k8s-master01, https://192.168.XX.X1:2380, https://192.168.XX.X1:2379, false

bd53c1cba61d0cb6, started, k8s-master03, https://192.168.XX.X3:2380, https://192.168.XX.X3:2379, false

退出容器

$ exit

kubeadm join 10.0.0.150:16443 --token 7t2weq.bjbawausm0jaxury

--discovery-token-ca-cert-hash sha256:eb41a69a0faf206dfdc2934f7a3c3d3e25d0d1e62042cb381d851a6edcb5e7be

--control-plane --certificate-key 92dbf6698dfa5052b4efba678de8f40b3e762b2ad10834be55717f0ad2000d16

master03上执行

kubeadm reset -f

master01上重新生成token

bash 复制代码

[root@k8s-master01 ~]#kubeadm init phase upload-certs --upload-certs
I0731 22:12:06.065978  110479 version.go:254] remote version is much newer: v1.33.3; falling back to: stable-1.20
[upload-certs] Storing the certificates in Secret "kubeadm-certs" in the "kube-system" Namespace
[upload-certs] Using certificate key:
92dbf6698dfa5052b4efba678de8f40b3e762b2ad10834be55717f0ad2000d16

在master03上执行

bash 复制代码

 kubeadm join 10.0.0.150:16443 --token 7t2weq.bjbawausm0jaxury \
    --discovery-token-ca-cert-hash sha256:eb41a69a0faf206dfdc2934f7a3c3d3e25d0d1e62042cb381d851a6edcb5e7be \
    --control-plane --certificate-key 92dbf6698dfa5052b4efba678de8f40b3e762b2ad10834be55717f0ad2000d16