{"id":1598,"date":"2020-06-09T21:19:32","date_gmt":"2020-06-09T13:19:32","guid":{"rendered":"http:\/\/39.97.231.10\/?p=1598"},"modified":"2020-06-09T21:19:32","modified_gmt":"2020-06-09T13:19:32","slug":"kubernetes-%e9%87%8d%e6%96%b0%e9%85%8d%e7%bd%ae%e6%b4%bb%e5%8a%a8%e9%9b%86%e7%be%a4%e4%b8%ad%e8%8a%82%e7%82%b9%e7%9a%84-kubelet","status":"publish","type":"post","link":"http:\/\/www.weijing.co\/?p=1598","title":{"rendered":"Kubernetes \u91cd\u65b0\u914d\u7f6e\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u8282\u70b9\u7684 Kubelet"},"content":{"rendered":"<header class=\\\"entry-header\\\">\n<h1 class=\\\"entry-title\\\">Kubernetes \u91cd\u65b0\u914d\u7f6e\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u8282\u70b9\u7684 Kubelet<\/h1>\n<\/header>\n<div class=\\\"entry-content\\\">\n<div id=\\\"toc_container\\\" class=\\\"no_bullets\\\">\n<ul class=\\\"toc_list\\\">\n<li><span class=\\\"toc_number toc_depth_1\\\">1<\/span>\u00a0Before you begin<\/li>\n<li><span class=\\\"toc_number toc_depth_1\\\">2<\/span>\u00a0\u91cd\u65b0\u914d\u7f6e\u96c6\u7fa4\u6d3b\u52a8\u8282\u70b9\u4e0a\u7684 Kubelet\n<ul>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.1<\/span>\u00a0\u57fa\u672c\u5de5\u4f5c\u6d41\u7a0b\u6982\u89c8<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.2<\/span>\u00a0Node Authorizer \u53d8\u901a\u65b9\u6848<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.3<\/span>\u00a0\u751f\u6210\u5305\u542b\u5f53\u524d\u914d\u7f6e\u7684\u6587\u4ef6<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.4<\/span>\u00a0\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.5<\/span>\u00a0\u63a8\u9001\u914d\u7f6e\u6587\u4ef6\u81f3\u63a7\u5236\u5e73\u9762<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.6<\/span>\u00a0\u6388\u6743\u8282\u70b9\u8bfb\u53d6\u65b0\u7684 ConfigMap<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.7<\/span>\u00a0\u8bbe\u7f6e\u8282\u70b9\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.8<\/span>\u00a0\u89c2\u5bdf\u8282\u70b9\u662f\u5426\u5f00\u59cb\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.9<\/span>\u00a0\u518d\u6b21\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.10<\/span>\u00a0\u63a8\u9001\u91cd\u65b0\u7f16\u8f91\u8fc7\u7684\u914d\u7f6e\u5230\u63a7\u5236\u5e73\u9762<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.11<\/span>\u00a0\u6388\u6743\u8282\u70b9\u8bfb\u53d6\u65b0\u7684 ConfigMap<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.12<\/span>\u00a0\u914d\u7f6e\u8282\u70b9\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.13<\/span>\u00a0\u89c2\u5bdf Kubelet \u662f\u5426\u6b63\u5728\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.14<\/span>\u00a0\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7 ConfigMap \u7684\u6388\u6743<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.15<\/span>\u00a0\u91cd\u7f6e\u8282\u70b9\u4ee5\u4f7f\u7528\u672c\u5730\u9ed8\u8ba4\u914d\u7f6e<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.16<\/span>\u00a0\u89c2\u5bdf\u8282\u70b9\u662f\u5426\u6b63\u5728\u4f7f\u7528\u672c\u5730\u9ed8\u8ba4\u914d\u7f6e<\/li>\n<li><span class=\\\"toc_number toc_depth_2\\\">2.17<\/span>\u00a0\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7 ConfigMap \u7684\u6388\u6743<\/li>\n<\/ul>\n<\/li>\n<li><span class=\\\"toc_number toc_depth_1\\\">3<\/span>\u00a0Kubectl Patch \u793a\u4f8b<\/li>\n<li><span class=\\\"toc_number toc_depth_1\\\">4<\/span>\u00a0\u7406\u89e3 ConfigOK <a href=\\\"http:\/\/docs.kubernetes.org.cn\/791.html#_ConfigOK\\\">\u72b6\u6001<\/a><\/li>\n<\/ul>\n<\/div>\n<p>FEATURE STATE:\u00a0Kubernetes v1.8\u00a0alpha<br \/>\n1.8 \u7248\u672c\u7684 Kubernetes \u4e2d\u5305\u542b\u4e86\u4e00\u4e2a\u65b0\u7684\u00a0\u52a8\u6001 Kubelet \u914d\u7f6e\uff08Dynamic Kubelet Configuration\uff09\u00a0alpha \u529f\u80fd\u3002\u8be5\u529f\u80fd\u53ef\u4ee5\u8ba9\u60a8\u901a\u8fc7\u9876\u7ea7 Kubernetes \u6982\u5ff5\uff08first-class Kubernetes concepts\uff09\u6539\u53d8\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u7684 Kubelet \u7684\u914d\u7f6e\u3002\u7279\u522b\u7684\uff0c\u8be5\u529f\u80fd\u8fd8\u5141\u8bb8\u901a\u8fc7 ConfigMaps \u914d\u7f6e\u5355\u4e2a\u8282\u70b9\u7684 Kubelet\u3002<br \/>\n\u8b66\u544a\uff1a\u00a0\u6240\u6709\u7684 Kubelet \u914d\u7f6e\u53c2\u6570\u90fd\u53ef\u4ee5\u52a8\u6001\u4fee\u6539\uff0c\u4f46\u5e76\u4e0d\u662f\u6240\u6709\u7684\u4fee\u6539\u90fd\u5b89\u5168\u3002\u6b64\u529f\u80fd\u9002\u7528\u4e8e\u5bf9\u914d\u7f6e\u66f4\u6539\u4f1a\u5982\u4f55\u5f71\u54cd\u884c\u4e3a\u6709\u6df1\u523b\u7406\u89e3\u7684\u7cfb\u7edf\u4e13\u5bb6\u3002\u5f53\u524d\u6ca1\u6709\u4e00\u4e2a\u6587\u4ef6\u5217\u51fa\u201c\u5bf9\u4fee\u6539\u5b89\u5168\u201d\u7684\u914d\u7f6e\u57df\uff0c\u4f46\u6211\u4eec\u8ba1\u5212\u5728\u6b64\u529f\u80fd\u4ece alpha \u9636\u6bb5\u6bd5\u4e1a\u65f6\u6dfb\u52a0\u8fd9\u4e2a\u6587\u4ef6\u3002<\/p>\n<h2 id=\\\"before-you-begin\\\"><span id=\\\"Before_you_begin\\\">Before you begin<\/span><\/h2>\n<ul>\n<li>\u6709\u4e00\u4e2a\u6d3b\u52a8\u7684 Kubernetes \u96c6\u7fa4\uff0cMaster \u548c Node \u5747\u8fd0\u884c 1.8 \u6216\u66f4\u9ad8\u7248\u672c\u3002Kubernetes \u6253\u5f00\u4e86\u00a0DynamicKubeletConfig\u00a0\u7279\u6027\u5f00\u5173\uff08feature gate\uff09\u5e76\u8bbe\u7f6e Kubelet \u7684\u00a0&#8211;dynamic-config-dir\u00a0\u53c2\u6570\u4e3a\u8282\u70b9\u4e0a\u7684\u4e00\u4e2a\u53ef\u5199\u76ee\u5f55\u3002\u5fc5\u987b\u8bbe\u7f6e\u6b64\u53c2\u6570\u4ee5\u542f\u7528\u52a8\u6001 Kubelet \u914d\u7f6e\u3002<\/li>\n<li>kubectl \u547d\u4ee4\u884c\u5de5\u5177\u4e5f\u5fc5\u987b\u4e3a 1.8 \u6216\u66f4\u9ad8\u7248\u672c\uff0c\u5e76\u80fd\u548c\u96c6\u7fa4\u6b63\u5e38\u901a\u4fe1\u3002<\/li>\n<\/ul>\n<h2 id=\\\"\u91cd\u65b0\u914d\u7f6e\u96c6\u7fa4\u6d3b\u52a8\u8282\u70b9\u4e0a\u7684-kubelet\\\"><span id=\\\"_Kubelet\\\">\u91cd\u65b0\u914d\u7f6e\u96c6\u7fa4\u6d3b\u52a8\u8282\u70b9\u4e0a\u7684 Kubelet<\/span><\/h2>\n<h3 id=\\\"\u57fa\u672c\u5de5\u4f5c\u6d41\u7a0b\u6982\u89c8\\\"><span id=\\\"i\\\">\u57fa\u672c\u5de5\u4f5c\u6d41\u7a0b\u6982\u89c8<\/span><\/h3>\n<p>\u914d\u7f6e\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u7684 kubelet \u7684\u57fa\u672c\u5de5\u4f5c\u6d41\u7a0b\u5982\u4e0b\uff1a<\/p>\n<ol>\n<li>\u7f16\u5199\u4e00\u4e2a\u5305\u542b Kubelet \u914d\u7f6e\u7684 YAML \u6216 JSON \u683c\u5f0f\u7684\u914d\u7f6e\u6587\u4ef6\u3002<\/li>\n<li>\u7528 ConfigMap \u5305\u88c5\u8be5\u6587\u4ef6\u5e76\u4fdd\u5b58\u81f3 Kubernetes \u63a7\u5236\u5e73\u9762\u3002<\/li>\n<li>\u66f4\u65b0 Kubelet \u5bf9\u5e94\u7684\u8282\u70b9\u5bf9\u8c61\u4ee5\u4f7f\u7528\u6b64 ConfigMap\u3002<\/li>\n<\/ol>\n<p>\u6bcf\u4e2a Kubelet \u90fd\u4f1a\u76d1\u63a7\u5404\u81ea\u8282\u70b9\u5bf9\u8c61\u4e0a\u7684\u914d\u7f6e\u5f15\u7528\u3002\u5f53\u8fd9\u4e2a\u5f15\u7528\u53d1\u751f\u6539\u53d8\u65f6\uff0cKubelet \u5c06\u4e0b\u8f7d\u65b0\u7684\u914d\u7f6e\u5e76\u9000\u51fa\u3002\u4e3a\u4e86\u4f7f\u8fd9\u4e2a\u529f\u80fd\u6b63\u5e38\u5de5\u4f5c\uff0c\u60a8\u5fc5\u987b\u8fd0\u884c\u4e00\u4e2a\u8fdb\u7a0b\u7ba1\u7406\u5668\uff08\u4f8b\u5982 systemd\uff09\uff0c\u4ee5\u4fbf\u5728 Kubelet \u9000\u51fa\u65f6\u81ea\u52a8\u5bf9\u5176\u8fdb\u884c\u91cd\u542f\u3002\u5f53 Kubelet \u91cd\u65b0\u542f\u52a8\u540e\uff0c\u5b83\u5c06\u5f00\u59cb\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\u3002<br \/>\n\u65b0\u7684\u914d\u7f6e\u5c06\u5b8c\u5168\u8986\u76d6\u65e7\u914d\u7f6e\uff1b\u65b0\u914d\u7f6e\u4e2d\u6ca1\u6709\u6307\u5b9a\u7684\u5b57\u6bb5\u5c06\u4f7f\u7528\u5178\u578b\u7684\u9ed8\u8ba4\u503c\u3002\u67d0\u4e9b CLI \u914d\u7f6e\u9879\u6ca1\u6709\u4e0e\u4e4b\u5173\u8054\u7684\u914d\u7f6e\u5b57\u6bb5\uff0c\u4e5f\u4e0d\u4f1a\u88ab\u65b0\u7684\u914d\u7f6e\u6240\u5f71\u54cd\u3002\u8fd9\u4e9b\u5b57\u6bb5\u5728 KubeletFlags \u7ed3\u6784\u4f53\u4e2d\u8fdb\u884c\u4e86\u5b9a\u4e49\u3002<br \/>\n\u8282\u70b9 Kubelet \u914d\u7f6e\u7684\u72b6\u6001\u901a\u8fc7\u8282\u70b9\u72b6\u6001\u4e2d\u7684\u00a0ConfigOK\u00a0\u72b6\u6001\u8fdb\u884c\u62a5\u544a\u3002\u4e00\u65e6\u4f7f\u7528\u65b0\u7684 ConfigMap \u5bf9\u8282\u70b9\u8fdb\u884c\u4e86\u5347\u7ea7\uff0c\u60a8\u5c31\u53ef\u4ee5\u901a\u8fc7\u89c2\u5bdf\u8fd9\u4e2a\u72b6\u6001\u786e\u8ba4\u8282\u70b9\u662f\u5426\u6b63\u5728\u4f7f\u7528\u9884\u671f\u7684\u914d\u7f6e\u3002\u60a8\u53ef\u4ee5\u5728\u6587\u7ae0\u672b\u5c3e\u627e\u5230\u63cf\u8ff0\u6240\u6709\u53ef\u80fd\u72b6\u6001\u7684\u8868\u683c\u3002<br \/>\n\u672c\u6587\u63cf\u8ff0\u4e86\u901a\u8fc7\u00a0kubectl edit\u00a0\u7f16\u8f91\u8282\u70b9\u7684\u65b9\u6cd5\u3002\u9664\u6b64\u4e4b\u5916\u8fd8\u6709\u5176\u5b83\u4fee\u6539\u8282\u70b9 spec \u7684\u65b9\u5f0f\uff0c\u4f8b\u5982\u00a0kubectl patch\u00a0\u53ef\u7528\u4e8e\u901a\u8fc7\u811a\u672c\u914d\u7f6e\u7684\u5de5\u4f5c\u6d41\u7a0b\u3002<br \/>\n\u672c\u6587\u4ec5\u4ec5\u4ecb\u7ecd\u4e86\u5355\u4e2a\u8282\u70b9\u4f7f\u7528\u5404\u79cd ConfigMap \u7684\u573a\u666f\u3002\u8fd9\u4e5f\u9002\u7528\u4e8e\u591a\u4e2a\u8282\u70b9\u4f7f\u7528\u76f8\u540c ConfigMap \u7684\u573a\u666f\u3002<\/p>\n<h3 id=\\\"node-authorizer-\u53d8\u901a\u65b9\u6848\\\"><span id=\\\"Node_Authorizer\\\">Node Authorizer \u53d8\u901a\u65b9\u6848<\/span><\/h3>\n<p>Node Authorizer \u4e0d\u4f1a\u5728\u610f\u54ea\u4e2a ConfigMap \u5206\u914d\u7ed9\u4e86\u54ea\u4e2a\u8282\u70b9\u3002\u5982\u679c\u60a8\u76ee\u524d\u6b63\u5728\u4f7f\u7528 Node authorizer\uff0c\u8282\u70b9\u7684 Kubelet \u5c06\u4e0d\u80fd\u81ea\u52a8\u83b7\u5f97\u4e0b\u8f7d\u5404\u81ea ConfigMap \u7684\u6743\u9650\u3002<br \/>\n\u672c\u6587\u4f7f\u7528\u7684\u4e34\u65f6\u53d8\u901a\u65b9\u6848\u662f\u4e3a\u6bcf\u4e2a ConfigMap \u624b\u52a8\u521b\u5efa RBAC Role \u548c RoleBinding\u3002\u5728\u52a8\u6001 Kubelet \u914d\u7f6e\u529f\u80fd\u4ece alpha \u9636\u6bb5\u6bd5\u4e1a\u4e4b\u524d\uff0c\u6211\u4eec\u5c06\u5bf9 Node Authorizer \u8fdb\u884c\u6269\u5c55\uff0c\u6240\u4ee5\u60a8\u6c38\u8fdc\u4e0d\u5fc5\u5728\u751f\u4ea7\u73af\u5883\u4e2d\u8fd9\u6837\u505a\u3002<\/p>\n<h3 id=\\\"\u751f\u6210\u5305\u542b\u5f53\u524d\u914d\u7f6e\u7684\u6587\u4ef6\\\"><span id=\\\"i-2\\\">\u751f\u6210\u5305\u542b\u5f53\u524d\u914d\u7f6e\u7684\u6587\u4ef6<\/span><\/h3>\n<p>\u52a8\u6001 Kubelet \u914d\u7f6e\u529f\u80fd\u5141\u8bb8\u60a8\u5bf9\u6574\u4e2a\u914d\u7f6e\u5bf9\u8c61\u8fdb\u884c\u8986\u76d6\uff0c\u800c\u4e0d\u53ea\u662f\u5355\u4e2a\u5b57\u6bb5\u7684\u66ff\u6362\u3002\u8fd9\u79cd\u66f4\u4e3a\u7b80\u5355\u7684\u6a21\u5f0f\u4f7f\u5f97\u8ffd\u8e2a\u914d\u7f6e\u503c\u7684\u6765\u6e90\u53ca\u8c03\u8bd5\u95ee\u9898\u53d8\u5f97\u66f4\u52a0\u5bb9\u6613\u3002\u4f46\u662f\uff0c\u968f\u4e4b\u800c\u6765\u7684\u95ee\u9898\u662f\u60a8\u5fc5\u987b\u77e5\u9053\u73b0\u5b58\u7684\u914d\u7f6e\uff0c\u4ee5\u786e\u4fdd\u53ea\u5bf9\u9700\u8981\u7684\u914d\u7f6e\u5b57\u6bb5\u8fdb\u884c\u4e86\u4fee\u6539\u3002<br \/>\n\u5c06\u6765\uff0cKubelet \u5c06\u4f7f\u7528\u78c1\u76d8\u4e0a\u7684\u6587\u4ef6\u8fdb\u884c\u5f15\u5bfc\uff0c\u60a8\u53ef\u4ee5\u7b80\u5355\u7684\u901a\u8fc7\u7f16\u8f91\u8fd9\u4e2a\u6587\u4ef6\u7684\u526f\u672c\uff08\u4f5c\u4e3a\u6700\u4f73\u5b9e\u8df5\uff0c\u5e94\u8be5\u5bf9\u5176\u8fdb\u884c\u7248\u672c\u63a7\u5236\uff09\u6765\u521b\u5efa\u7b2c\u4e00\u4e2a Kubelet ConfigMap\u3002\u7136\u800c\u5f53\u524d Kubelet \u4ecd\u7136\u4f7f\u7528\u547d\u4ee4\u884c\u53c2\u6570\u542f\u52a8\u3002\u5e78\u8fd0\u7684\u662f\uff0c\u60a8\u53ef\u4ee5\u901a\u8fc7\u4e00\u4e2a\u810f\u6280\u5de7\uff08dirty trick\uff09\u751f\u6210\u5305\u542b\u8282\u70b9\u5f53\u524d\u914d\u7f6e\u7684\u6587\u4ef6\u3002\u8fd9\u4e2a\u6280\u5de7\u9700\u8981\u901a\u8fc7 kubectl proxy \u8bbf\u95ee Kubelet \u670d\u52a1\u7684\u00a0configz\u00a0endpoint\u3002\u5728\u76ee\u524d\u7684\u5b9e\u73b0\u4e2d\uff0c\u8fd9\u4e2a endpoint \u4ec5\u7528\u4e8e\u8f85\u52a9\u8c03\u8bd5\uff0c\u8fd9\u5c31\u662f\u4e3a\u4f55\u8fd9\u662f\u4e00\u4e2a\u810f\u6280\u5de7\u3002\u6539\u8fdb\u8fd9\u4e2a endpoint \u7684\u5de5\u4f5c\u6b63\u5728\u8fdb\u884c\u5f53\u4e2d\uff0c\u672a\u6765\u8fd9\u4e2a\u64cd\u4f5c\u5c06\u53d8\u5f97\u4e0d\u662f\u90a3\u4e48 \u201c\u810f\u201d\u3002\u8fd9\u4e2a\u6280\u5de7\u8fd8\u8981\u6c42\u60a8\u7684\u673a\u5668\u5b89\u88c5\u4e86\u00a0jq\u00a0\u547d\u4ee4\u884c\u5de5\u5177\uff0c\u7528\u4e8e\u5bf9 endpoint \u56de\u590d\u7684 JSON \u54cd\u5e94\u8fdb\u884c\u62c6\u5305\u548c\u7f16\u8f91\u3002<br \/>\n\u6267\u884c\u4e0b\u5217\u6b65\u9aa4\u4ee5\u751f\u6210\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n<ol>\n<li>\u9009\u62e9\u4e00\u4e2a\u9700\u8981\u91cd\u65b0\u914d\u7f6e\u7684\u8282\u70b9\u3002\u6211\u4eec\u5c06\u4f7f\u7528 NODE_NAME \u6307\u4ee3\u8fd9\u4e2a\u8282\u70b9\u7684\u540d\u5b57\u3002<\/li>\n<li>\u901a\u8fc7\u00a0kubectl proxy &#8211;port=8001 &amp;\u00a0\u547d\u4ee4\u5728\u540e\u53f0\u542f\u52a8 kubectl proxy\u3002<\/li>\n<li>\u8fd0\u884c\u4e0b\u5217\u547d\u4ee4\u4ee5\u4ece configz endpoint \u4e0b\u8f7d\u5e76\u89e3\u5305\u914d\u7f6e\u3002<\/li>\n<\/ol>\n<div>\n<div>\n<pre>$ export NODE_NAME=the-name-of-the-node-you-are-reconfiguring\n$ curl -sSL http:\/\/localhost:8001\/api\/v1\/proxy\/nodes\/${NODE_NAME}\/configz | jq \\'.kubeletconfig|.kind=\\\"KubeletConfiguration\\\"|.apiVersion=\\\"kubeletconfig\/v1alpha1\\\"\\' &gt; kubelet_configz_${NODE_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u8bf7\u6ce8\u610f\uff0c\u6211\u4eec\u9700\u8981\u624b\u52a8\u4e3a\u4e0b\u8f7d\u7684\u5bf9\u8c61\u6dfb\u52a0\u00a0kind\u00a0\u548c\u00a0apiVersion\uff0c\u56e0\u4e3a configz endpoint \u6ca1\u6709\u62a5\u544a\u8fd9\u4e9b\u503c\u3002\u8fd9\u662f\u8ba1\u5212\u5728\u5c06\u6765\u8fdb\u884c\u4fee\u590d\u7684\u9650\u5236\u4e4b\u4e00\u3002<\/p>\n<h3 id=\\\"\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6\\\"><span id=\\\"i-3\\\">\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6<\/span><\/h3>\n<p>\u4f7f\u7528\u6587\u672c\u7f16\u8f91\u5668\u6539\u53d8\u524d\u9762\u6b65\u9aa4\u751f\u6210\u7684\u00a0kubelet_configz_${NODE_NAME}\u00a0\u6587\u4ef6\u4e2d\u7684\u67d0\u4e2a\u53c2\u6570\u3002\u4f8b\u5982\uff0cQPS \u53c2\u6570\u00a0eventRecordQPS\u00a0\u662f\u4e00\u4e2a\u4e0d\u9519\u7684\u9009\u62e9\u3002<\/p>\n<h3 id=\\\"\u63a8\u9001\u914d\u7f6e\u6587\u4ef6\u81f3\u63a7\u5236\u5e73\u9762\\\"><span id=\\\"i-4\\\">\u63a8\u9001\u914d\u7f6e\u6587\u4ef6\u81f3\u63a7\u5236\u5e73\u9762<\/span><\/h3>\n<p>\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\u63a8\u9001\u7f16\u8f91\u540e\u7684\u914d\u7f6e\u6587\u4ef6\u81f3\u63a7\u5236\u5e73\u9762\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system create configmap my-node-config --from-file=kubelet=kubelet_configz_${NODE_NAME} --append-hash -o yaml\n<\/pre>\n<\/div>\n<\/div>\n<p>\u60a8\u5e94\u8be5\u770b\u5230\u7c7b\u4f3c\u7684\u54cd\u5e94\uff1a<\/p>\n<div>\n<div>\n<pre>apiVersion: v1\ndata:\n  kubelet: |\n    {...}\nkind: ConfigMap\nmetadata:\n  creationTimestamp: 2017-09-14T20:23:33Z\n  name: my-node-config-gkt4c2m4b2\n  namespace: kube-system\n  resourceVersion: \\\"119980\\\"\n  selfLink: \/api\/v1\/namespaces\/kube-system\/configmaps\/my-node-config-gkt4c2m4b2\n  uid: 946d785e-998a-11e7-a8dd-42010a800006\n<\/pre>\n<\/div>\n<\/div>\n<p>\u8bf7\u6ce8\u610f\uff0cConfigMap \u7684\u00a0kubelet\u00a0\u952e\u4e0b\u5fc5\u987b\u5b58\u5728\u914d\u7f6e\u6570\u636e\u3002<br \/>\n\u6211\u4eec\u5728\u00a0kube-system\u00a0namespace \u4e2d\u521b\u5efa\u8fd9\u4e2a ConfigMap\uff0c\u8fd9\u79cd\u9009\u62e9\u662f\u6070\u5f53\u7684\uff0c\u56e0\u4e3a\u8fd9\u4e2a ConfigMap \u7528\u4e8e\u914d\u7f6e Kubernetes \u7684\u7cfb\u7edf\u7ec4\u4ef6\u4e4b\u4e00 \u2014\u2014 Kubelet\u3002<br \/>\n&#8211;append-hash\u00a0\u9009\u9879\u5c06 ConfigMap \u5185\u5bb9\u7684\u77ed\u6821\u9a8c\u548c\u6dfb\u52a0\u5230\u5176\u540d\u79f0\u540e\u9762\u3002\u8fd9\u5c06\u4e3a edit-&gt;push \u5de5\u4f5c\u6d41\u7a0b\u5e26\u6765\u4fbf\u5229\uff0c\u56e0\u4e3a\u5b83\u5c06\u81ea\u52a8\u7684\u3001\u786e\u5207\u7684\u4e3a\u65b0\u7684 ConfigMap \u751f\u6210\u65b0\u7684\u540d\u79f0\u3002<br \/>\n\u6211\u4eec\u4f7f\u7528 -o yaml \u8f93\u51fa\u683c\u5f0f\uff0c\u4ee5\u4fbf\u521b\u5efa\u7684\u65f6\u5019\u8f93\u51fa name\u3001namespace \u548c uid\u3002\u5728\u540e\u7eed\u6b65\u9aa4\u4e2d\u6211\u4eec\u5c06\u9700\u8981\u8fd9\u4e9b\u503c\u3002\u6211\u4eec\u5c06\u4f7f\u7528 CONFIG_MAP_NAME \u6307\u4ee3 name\uff0c\u4f7f\u7528 CONFIG_MAP_UID \u6307\u4ee3 uid\u3002<\/p>\n<h3 id=\\\"\u6388\u6743\u8282\u70b9\u8bfb\u53d6\u65b0\u7684-configmap\\\"><span id=\\\"_ConfigMap\\\">\u6388\u6743\u8282\u70b9\u8bfb\u53d6\u65b0\u7684 ConfigMap<\/span><\/h3>\n<p>\u73b0\u5728\u60a8\u5df2\u7ecf\u521b\u5efa\u4e86\u4e00\u4e2a\u65b0\u7684 ConfigMap\uff0c\u60a8\u9700\u8981\u6388\u6743\u8282\u70b9\u5bf9\u5176\u8fdb\u884c\u8bfb\u53d6\u3002\u9996\u5148\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\u4e3a\u65b0\u7684 ConfigMap \u521b\u5efa\u4e00\u4e2a Role\uff1a<\/p>\n<div>\n<div>\n<pre>$ export CONFIG_MAP_NAME=name-from-previous-output\n$ kubectl -n kube-system create role ${CONFIG_MAP_NAME}-reader --verb=get --resource=configmap --resource-name=${CONFIG_MAP_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u63a5\u4e0b\u6765\uff0c\u521b\u5efa\u4e00\u4e2a RoleBinding \u4ee5\u5c06\u8282\u70b9\u548c\u65b0\u7684 Role \u8fdb\u884c\u5173\u8054\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system create rolebinding ${CONFIG_MAP_NAME}-reader --role=${CONFIG_MAP_NAME}-reader --user=system:node:${NODE_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u4e00\u65e6\u5c06\u6765 Node Authorizer \u53ef\u4ee5\u81ea\u52a8\u8fdb\u884c\u8be5\u5de5\u4f5c\u65f6\uff0c\u60a8\u5c31\u53ef\u4ee5\u8df3\u8fc7\u8fd9\u4e2a\u6b65\u9aa4\u3002<\/p>\n<h3 id=\\\"\u8bbe\u7f6e\u8282\u70b9\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\\\"><span id=\\\"i-5\\\">\u8bbe\u7f6e\u8282\u70b9\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/span><\/h3>\n<p>\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\u7f16\u8f91\u8282\u70b9\u7684\u5f15\u7528\uff0c\u4f7f\u5176\u6307\u5411\u65b0\u7684 ConfigMap\u3002<\/p>\n<div>\n<div>\n<pre>kubectl edit node ${NODE_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u4f7f\u7528\u7f16\u8f91\u5668\uff0c\u5728\u00a0spec\u00a0\u4e0b\u6dfb\u52a0\u5982\u4e0b YAML\uff1a<\/p>\n<div>\n<div>\n<pre>configSource:\n    configMapRef:\n        name: CONFIG_MAP_NAME\n        namespace: kube-system\n        uid: CONFIG_MAP_UID\n<\/pre>\n<\/div>\n<\/div>\n<p>\u8bf7\u786e\u4fdd\u6307\u5b9a\u4e86\u00a0name\u3001namespace\u00a0\u548c\u00a0uid\u00a0\u4e09\u4e2a\u914d\u7f6e\u3002<\/p>\n<h3 id=\\\"\u89c2\u5bdf\u8282\u70b9\u662f\u5426\u5f00\u59cb\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\\\"><span id=\\\"i-6\\\">\u89c2\u5bdf\u8282\u70b9\u662f\u5426\u5f00\u59cb\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/span><\/h3>\n<p>\u901a\u8fc7\u00a0kubectl get node ${NODE_NAME} -o yaml\u00a0\u547d\u4ee4\u83b7\u53d6\u8282\u70b9\u4fe1\u606f\uff0c\u5e76\u5728\u00a0status.conditions\u00a0\u4e0b\u67e5\u627e\u00a0ConfigOK\u00a0\u72b6\u6001\u3002\u5982\u679c Kubelet \u5df2\u7ecf\u5f00\u59cb\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\uff0c\u60a8\u5e94\u8be5\u80fd\u770b\u5230\u7c7b\u4f3c\u00a0Using current (UID: CONFIG_MAP_UID)\u00a0\u7684\u4fe1\u606f\u3002<br \/>\n\u65b9\u4fbf\u8d77\u89c1\uff0c\u60a8\u53ef\u4ee5\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\uff08\u4f7f\u7528\u00a0jq\uff09\u7b5b\u9009\u00a0ConfigOK\u00a0\u72b6\u6001\u3002<\/p>\n<div>\n<div>\n<pre>$ kubectl get no ${NODE_NAME} -o json | jq \\'.status.conditions|map(select(.type==\\\"ConfigOK\\\"))\\'\n[\n  {\n    \\\"lastHeartbeatTime\\\": \\\"2017-09-20T18:08:29Z\\\",\n    \\\"lastTransitionTime\\\": \\\"2017-09-20T18:08:17Z\\\",\n    \\\"message\\\": \\\"using current (UID: \\\\\\\"2ebc8d1a-9e2a-11e7-a8dd-42010a800006\\\\\\\")\\\",\n    \\\"reason\\\": \\\"passing all checks\\\",\n    \\\"status\\\": \\\"True\\\",\n    \\\"type\\\": \\\"ConfigOK\\\"\n  }\n]\n<\/pre>\n<\/div>\n<\/div>\n<p>\u5982\u679c\u51fa\u73b0\u95ee\u9898\uff0c\u60a8\u53ef\u80fd\u4f1a\u770b\u5230\u51e0\u79cd\u4e0d\u540c\u9519\u8bef\u72b6\u6001\u4e4b\u4e00\uff0c\u8be6\u60c5\u8bf7\u53c2\u9605\u4e0b\u9762\u7684 ConfigOK Conditions \u8868\u683c\u3002\u5f53\u8fd9\u4e2a\u60c5\u51b5\u53d1\u751f\u65f6\uff0c\u8bf7\u68c0\u67e5 Kubelet \u65e5\u5fd7\u4ee5\u83b7\u53d6\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n<h3 id=\\\"\u518d\u6b21\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6\\\"><span id=\\\"i-7\\\">\u518d\u6b21\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6<\/span><\/h3>\n<p>\u5982\u679c\u60f3\u8981\u518d\u6b21\u6539\u53d8\u914d\u7f6e\uff0c\u6211\u4eec\u53ef\u4ee5\u7b80\u5355\u7684\u91cd\u590d\u4e0a\u8ff0\u6b65\u9aa4\u3002\u8bf7\u5c1d\u8bd5\u7f16\u8f91\u00a0kubelet\u00a0\u6587\u4ef6\uff0c\u4e3a\u524d\u9762\u4fee\u6539\u8fc7\u7684\u53c2\u6570\u8bbe\u7f6e\u4e00\u4e2a\u65b0\u7684\u503c\u3002<\/p>\n<h3 id=\\\"\u63a8\u9001\u91cd\u65b0\u7f16\u8f91\u8fc7\u7684\u914d\u7f6e\u5230\u63a7\u5236\u5e73\u9762\\\"><span id=\\\"i-8\\\">\u63a8\u9001\u91cd\u65b0\u7f16\u8f91\u8fc7\u7684\u914d\u7f6e\u5230\u63a7\u5236\u5e73\u9762<\/span><\/h3>\n<p>\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\u751f\u6210\u65b0\u7684 ConfigMap \u6765\u63a8\u9001\u65b0\u914d\u7f6e\u5230\u63a7\u5236\u5e73\u9762\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl create configmap my-node-config --namespace=kube-system --from-file=kubelet=kubelet_configz_${NODE_NAME} --append-hash -o yaml\n<\/pre>\n<\/div>\n<\/div>\n<p>\u7531\u4e8e\u6211\u4eec\u6539\u53d8\u4e86\u5185\u5bb9\uff0c\u8fd9\u4e2a\u65b0\u7684 ConfigMap \u4f1a\u83b7\u5f97\u4e00\u4e2a\u65b0\u7684\u540d\u5b57\u3002\u6211\u4eec\u5c06\u4f7f\u7528 NEW_CONFIG_MAP_NAME \u6307\u4ee3\u65b0\u7684\u540d\u5b57\uff0c\u4f7f\u7528 NEW_CONFIG_MAP_UID \u6307\u4ee3\u65b0\u7684 uid\u3002<\/p>\n<h3 id=\\\"\u6388\u6743\u8282\u70b9\u8bfb\u53d6\u65b0\u7684-configmap-1\\\"><span id=\\\"_ConfigMap-2\\\">\u6388\u6743\u8282\u70b9\u8bfb\u53d6\u65b0\u7684 ConfigMap<\/span><\/h3>\n<p>\u73b0\u5728\u60a8\u5df2\u7ecf\u521b\u5efa\u4e86\u4e00\u4e2a\u65b0\u7684 ConfigMap\uff0c\u60a8\u9700\u8981\u6388\u6743\u8282\u70b9\u6765\u5bf9\u5176\u8fdb\u884c\u8bfb\u53d6\u3002\u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u5217\u547d\u4ee4\u4e3a\u65b0\u7684 ConfigMap \u521b\u5efa\u4e00\u4e2a Role\uff1a<\/p>\n<div>\n<div>\n<pre>$ export NEW_CONFIG_MAP_NAME=name-from-previous-output\n$ kubectl -n kube-system create role ${NEW_CONFIG_MAP_NAME}-reader --verb=get --resource=configmap --resource-name=${NEW_CONFIG_MAP_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u63a5\u4e0b\u6765\uff0c\u521b\u5efa\u4e00\u4e2a RoleBinding \u4ee5\u5bf9\u8282\u70b9\u548c\u65b0\u7684 Role \u8fdb\u884c\u5173\u8054\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system create rolebinding ${NEW_CONFIG_MAP_NAME}-reader --role=${NEW_CONFIG_MAP_NAME}-reader --user=system:node:${NODE_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u4e00\u65e6\u5c06\u6765 Node Authorizer \u53ef\u4ee5\u81ea\u52a8\u8fdb\u884c\u8be5\u5de5\u4f5c\u65f6\uff0c\u60a8\u5c31\u53ef\u4ee5\u8df3\u8fc7\u8fd9\u4e2a\u6b65\u9aa4\u3002<\/p>\n<h3 id=\\\"\u914d\u7f6e\u8282\u70b9\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\\\"><span id=\\\"i-9\\\">\u914d\u7f6e\u8282\u70b9\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/span><\/h3>\n<p>\u518d\u6b21\u4f7f\u7528\u00a0kubectl edit node ${NODE_NAME}\u00a0\u547d\u4ee4\u7f16\u8f91\u8282\u70b9\u7684\u00a0spec.configSource\u3002\u65b0\u7684\u00a0spec.configSource\u00a0\u5e94\u8be5\u548c\u4e0b\u9762\u7c7b\u4f3c\uff0c\u8bf7\u66ff\u6362\u00a0name\u00a0\u548c\u00a0uid\u00a0\u4e3a\u5b9e\u9645\u503c\uff1a<\/p>\n<div>\n<div>\n<pre>configSource:\n    configMapRef:\n        name: NEW_CONFIG_MAP_NAME\n        namespace: kube-system\n        uid: NEW_CONFIG_MAP_UID\n<\/pre>\n<\/div>\n<\/div>\n<h3 id=\\\"\u89c2\u5bdf-kubelet-\u662f\u5426\u6b63\u5728\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\\\"><span id=\\\"_Kubelet-2\\\">\u89c2\u5bdf Kubelet \u662f\u5426\u6b63\u5728\u4f7f\u7528\u65b0\u7684\u914d\u7f6e<\/span><\/h3>\n<p>\u518d\u4e00\u6b21\u4f7f\u7528\u00a0kubectl get node ${NODE_NAME} -o yaml\u00a0\u83b7\u53d6\u8282\u70b9\u4fe1\u606f\u5e76\u5728\u00a0status.conditions\u00a0\u5b57\u6bb5\u4e0b\u67e5\u770b\u00a0ConfigOK\u00a0\u72b6\u6001\u3002\u5f53 Kubelet \u5f00\u59cb\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\u65f6\uff0c\u60a8\u5e94\u8be5\u53ef\u4ee5\u770b\u89c1\u7c7b\u4f3c\u00a0Using current (UID: NEW_CONFIG_MAP_UID)\u00a0\u7684\u4fe1\u606f\u3002<\/p>\n<h3 id=\\\"\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7-configmap-\u7684\u6388\u6743\\\"><span id=\\\"_ConfigMap-3\\\">\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7 ConfigMap \u7684\u6388\u6743<\/span><\/h3>\n<p>\u4e00\u65e6\u77e5\u9053\u4e86\u8282\u70b9\u5df2\u7ecf\u5728\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\u5e76\u4e14\u786e\u4fe1\u6ca1\u6709\u5f15\u8d77\u4efb\u4f55\u95ee\u9898\u65f6\uff0c\u6700\u597d\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7 ConfigMap \u7684\u6388\u6743\u3002\u6267\u884c\u4e0b\u5217\u547d\u4ee4\u4ee5\u5220\u9664 RoleBinding \u548c Role\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system delete rolebinding ${CONFIG_MAP_NAME}-reader\n$ kubectl -n kube-system delete role ${CONFIG_MAP_NAME}-reader\n<\/pre>\n<\/div>\n<\/div>\n<p>\u8bf7\u6ce8\u610f\uff0c\u8fd9\u6837\u505a\u5e76\u4e0d\u4e00\u5b9a\u80fd\u9632\u6b62\u8282\u70b9\u8bfb\u53d6\u65e7\u914d\u7f6e\uff0c\u56e0\u4e3a\u5b83\u53ef\u80fd\u4f1a\u5728\u4e00\u6bb5\u4e0d\u5b9a\u7684\u65f6\u95f4\u5185\u5728\u672c\u5730\u7f13\u5b58\u65e7 ConfigMap\u3002<br \/>\n\u4f60\u8fd8\u53ef\u4ee5\u9009\u62e9\u5220\u9664\u65e7 ConfigMap\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system delete configmap ${CONFIG_MAP_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u4e00\u65e6\u5c06\u6765 Node Authorizer \u53ef\u4ee5\u81ea\u52a8\u8fdb\u884c\u8be5\u5de5\u4f5c\u65f6\uff0c\u60a8\u5c31\u53ef\u4ee5\u8df3\u8fc7\u8fd9\u4e2a\u6b65\u9aa4\u3002<\/p>\n<h3 id=\\\"\u91cd\u7f6e\u8282\u70b9\u4ee5\u4f7f\u7528\u672c\u5730\u9ed8\u8ba4\u914d\u7f6e\\\"><span id=\\\"i-10\\\">\u91cd\u7f6e\u8282\u70b9\u4ee5\u4f7f\u7528\u672c\u5730\u9ed8\u8ba4\u914d\u7f6e<\/span><\/h3>\n<p>\u6700\u540e\uff0c\u5982\u679c\u5e0c\u671b\u91cd\u7f6e\u8282\u70b9\u5e76\u4f7f\u7528\u542f\u52a8\u65f6\u7684\u914d\u7f6e\uff0c\u53ea\u9700\u8981\u7b80\u5355\u7684\u4f7f\u7528\u00a0kubectl edit node ${NODE_NAME}\u00a0\u547d\u4ee4\u7f16\u8f91\u8282\u70b9\u5e76\u53bb\u9664\u00a0spec.configSource\u00a0\u5b50\u5b57\u6bb5\u3002<\/p>\n<h3 id=\\\"\u89c2\u5bdf\u8282\u70b9\u662f\u5426\u6b63\u5728\u4f7f\u7528\u672c\u5730\u9ed8\u8ba4\u914d\u7f6e\\\"><span id=\\\"i-11\\\">\u89c2\u5bdf\u8282\u70b9\u662f\u5426\u6b63\u5728\u4f7f\u7528\u672c\u5730\u9ed8\u8ba4\u914d\u7f6e<\/span><\/h3>\n<p>\u5728\u53bb\u9664\u4e86\u8fd9\u4e2a\u5b50\u5b57\u6bb5\u4e4b\u540e\uff0c\u60a8\u5e94\u8be5\u6700\u7ec8\u80fd\u591f\u89c2\u5bdf\u5230 ConfigOK \u72b6\u6001\u7684\u4fe1\u606f\u53d8\u4e3a\u00a0using current (default)\u00a0\u6216\u8005\u00a0using current (init)\uff08\u8fd9\u53d6\u51b3\u4e8e\u8282\u70b9\u662f\u5982\u4f55\u914d\u7f6e\u7684\uff09\u3002<\/p>\n<h3 id=\\\"\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7-configmap-\u7684\u6388\u6743-1\\\"><span id=\\\"_ConfigMap-4\\\">\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7 ConfigMap \u7684\u6388\u6743<\/span><\/h3>\n<p>\u4e00\u65e6\u77e5\u9053\u4e86\u8282\u70b9\u5df2\u7ecf\u5728\u4f7f\u7528\u65b0\u7684\u914d\u7f6e\u5e76\u4e14\u786e\u4fe1\u6ca1\u6709\u5f15\u8d77\u4efb\u4f55\u95ee\u9898\u65f6\uff0c\u6700\u597d\u53d6\u6d88\u5bf9\u8282\u70b9\u8bfb\u53d6\u65e7 ConfigMap \u7684\u6388\u6743\u3002\u6267\u884c\u4e0b\u5217\u547d\u4ee4\u4ee5\u5220\u9664 RoleBinding \u548c Role\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system delete rolebinding ${NEW_CONFIG_MAP_NAME}-reader\n$ kubectl -n kube-system delete role ${NEW_CONFIG_MAP_NAME}-reader\n<\/pre>\n<\/div>\n<\/div>\n<p>\u8bf7\u6ce8\u610f\uff0c\u8fd9\u6837\u505a\u5e76\u4e0d\u4e00\u5b9a\u80fd\u9632\u6b62\u8282\u70b9\u8bfb\u53d6\u65e7\u914d\u7f6e\uff0c\u56e0\u4e3a\u5b83\u53ef\u80fd\u4f1a\u5728\u4e00\u6bb5\u4e0d\u5b9a\u7684\u65f6\u95f4\u5185\u5728\u672c\u5730\u7f13\u5b58\u65e7 ConfigMap\u3002<br \/>\n\u4f60\u8fd8\u53ef\u4ee5\u9009\u62e9\u5220\u9664\u65e7 ConfigMap\uff1a<\/p>\n<div>\n<div>\n<pre>$ kubectl -n kube-system delete configmap ${NEW_CONFIG_MAP_NAME}\n<\/pre>\n<\/div>\n<\/div>\n<p>\u4e00\u65e6\u5c06\u6765 Node Authorizer \u53ef\u4ee5\u81ea\u52a8\u8fdb\u884c\u8be5\u5de5\u4f5c\u65f6\uff0c\u60a8\u5c31\u53ef\u4ee5\u8df3\u8fc7\u8fd9\u4e2a\u6b65\u9aa4\u3002<\/p>\n<h2 id=\\\"kubectl-patch-\u793a\u4f8b\\\"><span id=\\\"Kubectl_Patch\\\">Kubectl Patch \u793a\u4f8b<\/span><\/h2>\n<p>\u5982\u4e0a\u6240\u8ff0\uff0c\u5b58\u5728\u591a\u79cd\u6539\u53d8\u8282\u70b9\u914d\u7f6e\u6e90\u7684\u65b9\u5f0f\u3002\u8fd9\u662f\u4e00\u4e2a\u4f7f\u7528\u00a0kubectl patch\u00a0\u547d\u4ee4\u7684\u793a\u4f8b\uff1a<\/p>\n<div>\n<div>\n<pre>kubectl patch node ${NODE_NAME} -p \\\"{\\\\\\\"spec\\\\\\\":{\\\\\\\"configSource\\\\\\\":{\\\\\\\"configMapRef\\\\\\\":{\\\\\\\"name\\\\\\\":\\\\\\\"${CONFIG_MAP_NAME}\\\\\\\",\\\\\\\"namespace\\\\\\\":\\\\\\\"kube-system\\\\\\\",\\\\\\\"uid\\\\\\\":\\\\\\\"${CONFIG_MAP_UID}\\\\\\\"}}}}\\\"\n<\/pre>\n<\/div>\n<\/div>\n<h2 id=\\\"\u7406\u89e3-configok-\u72b6\u6001\\\"><span id=\\\"_ConfigOK\\\">\u7406\u89e3 ConfigOK \u72b6\u6001<\/span><\/h2>\n<p>\u4e0b\u9762\u7684\u8868\u683c\u5217\u4e3e\u4e86\u60a8\u5728\u542f\u7528\u4e86\u52a8\u6001 Kubelet \u914d\u7f6e\u7684\u96c6\u7fa4\u4e2d\u53ef\u80fd\u9047\u5230\u7684\u51e0\u79cd\u00a0ConfigOK\u00a0\u8282\u70b9\u72b6\u6001\u3002\u5982\u679c\u60a8\u89c2\u5bdf\u5230\u72b6\u6001\u4e3a\u00a0status=False\uff0c\u8bf7\u68c0\u67e5 Kubelet \u65e5\u5fd7\u5e76\u641c\u7d22\u6d88\u606f\u6216\u539f\u56e0\u7684\u6587\u672c\uff0c\u4ee5\u83b7\u53d6\u66f4\u591a\u5173\u4e8e\u9519\u8bef\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n<table align=\\\"left\\\">\n<tbody>\n<tr>\n<th>Possible Messages<\/th>\n<th>Possible Reasons<\/th>\n<th>Status<\/th>\n<\/tr>\n<tr>\n<td>using current (default)<\/td>\n<td>current is set to the local default, and no init config was provided<\/td>\n<td>True<\/td>\n<\/tr>\n<tr>\n<td>using current (init)<\/td>\n<td>current is set to the local default, and an init config was provided<\/td>\n<td>True<\/td>\n<\/tr>\n<tr>\n<td>using current (UID: CURRENT_CONFIG_MAP_UID)<\/td>\n<td>passing all checks<\/td>\n<td>True<\/td>\n<\/tr>\n<tr>\n<td>using last-known-good (default)<\/td>\n<td>\n<ul>\n<li>failed to load current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<li>failed to parse current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<li>failed to validate current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<\/ul>\n<\/td>\n<td>False<\/td>\n<\/tr>\n<tr>\n<td>using last-known-good (init)<\/td>\n<td>\n<ul>\n<li>failed to load current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<li>failed to parse current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<li>failed to validate current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<\/ul>\n<\/td>\n<td>False<\/td>\n<\/tr>\n<tr>\n<td>using last-known-good (UID: LAST_KNOWN_GOOD_CONFIG_MAP_UID)<\/td>\n<td>\n<ul>\n<li>failed to load current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<li>failed to parse current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<li>failed to validate current (UID: CURRENT_CONFIG_MAP_UID)<\/li>\n<\/ul>\n<\/td>\n<td>False<\/td>\n<\/tr>\n<tr>\n<td>The reasons in the next column could potentially appear for any of the above messages.This condition indicates that the Kubelet is having trouble reconciling `spec.configSource`, and thus no change to the in-use configuration has occurred.<br \/>\nThe \\&#8221;failed to sync\\&#8221; reasons are specific to the failure that occurred, and the next column does not necessarily contain all possible failure reasons.<\/td>\n<td>failed to sync, reason:<\/p>\n<ul>\n<li>failed to read Node from informer object cache<\/li>\n<li>failed to reset to local (default or init) config<\/li>\n<li>invalid NodeConfigSource, exactly one subfield must be non-nil, but all were nil<\/li>\n<li>invalid ObjectReference, all of UID, Name, and Namespace must be specified<\/li>\n<li>invalid ObjectReference, UID SOME_UID does not match UID of downloaded ConfigMap SOME_OTHER_UID<\/li>\n<li>failed to determine whether object with UID SOME_UID was already checkpointed<\/li>\n<li>failed to download ConfigMap with name SOME_NAME from namespace SOME_NAMESPACE<\/li>\n<li>failed to save config checkpoint for object with UID SOME_UID<\/li>\n<li>failed to set current config checkpoint to default<\/li>\n<li>failed to set current config checkpoint to object with UID SOME_UID<\/li>\n<\/ul>\n<\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u8bd1\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Kubernetes \u91cd\u65b0\u914d\u7f6e\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u8282\u70b9\u7684 Kubelet 1\u00a0Before you begin 2\u00a0\u91cd\u65b0 &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"http:\/\/www.weijing.co\/?p=1598\"> <span class=\"screen-reader-text\">Kubernetes \u91cd\u65b0\u914d\u7f6e\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u8282\u70b9\u7684 Kubelet<\/span> \u67e5\u770b\u5168\u6587 &raquo;<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[104,123],"tags":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"mailpoet_newsletter_max":false,"woocommerce_thumbnail":false,"woocommerce_single":false,"woocommerce_gallery_thumbnail":false,"shop_catalog":false,"shop_single":false,"shop_thumbnail":false},"uagb_author_info":{"display_name":"weijing","author_link":"http:\/\/www.weijing.co\/?author=4"},"uagb_comment_info":0,"uagb_excerpt":"Kubernetes \u91cd\u65b0\u914d\u7f6e\u6d3b\u52a8\u96c6\u7fa4\u4e2d\u8282\u70b9\u7684 Kubelet 1\u00a0Before you begin 2\u00a0\u91cd\u65b0&hellip;","_links":{"self":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/1598"}],"collection":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1598"}],"version-history":[{"count":0,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/1598\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1598"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1598"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}