View kube-apiserver been given as follows:
I1226 06:49:10.108947 1 log.go:172] http: TLS handshake error from x.x.x:43534: unexpected EOF
I1226 06:44:10.110418 1 log.go:172] http: TLS handshake error from x.x.x.x:35946: unexpected EOF
Said to be from the error prompt TLS authentication fails, the investigation process:
- As do master high availability with nginx + Keepalived, suspected of nginx http health check lead.
- kubelet certificate issue.
- Check for other service ports of call apiserver.
After a term investigation, and finally we found before using Zabbix to monitor the http port apiserver, resulting from certification because k8s cluster opened https.