Deploy kubeedge 1.4 to start the edgecore component and report an error "dial websocket error(x509: cannot validate certificate for 192.168.1.2"

1. Websocket authentication failed

dial websocket error(x509: cannot validate certificate for 192.168.1.1 because it doesn’t contain any IP SANs)
Insert picture description here

Two, the solution

2.1.如果手动生成过证书,需先清理(在云端节点操作)

kubectl delete secret casecret -nkubeedge
kubectl delete secret cloudcoresecret -nkubeedge

If it is the first installation, ignore this step.

2.2.获取token(在云端节点操作)

kubectl get secret -nkubeedge tokensecret -o=jsonpath='{.data.tokendata}' | base64 -d

Insert picture description here

2.3.更新token到edgecore.yaml(在边缘节点操作)

The 1.3.0 official version does not need to manually transfer the certificate to the edge node. After edgecore is executed, the certificate will be automatically downloaded to the ca and certs directories under /etc/kubeedge/ of the edge node. This directory needs to be created in advance

token="云端节点生成的值"
mkdir -p /etc/kubeedge/{ca,certs}		
sed -i  "s|token: .*|token: ${token}|g" edgecore.yaml
nohup edgecore > /var/log/edgecore.log 2>&1 &		#启动edgecore

You can also use vi to modify directly, the modified as follows
Insert picture description here

Guess you like

Origin blog.csdn.net/anqixiang/article/details/108735696