kubelet证书申请并加入集群

查看kubelet证书请求

[root@k8s-master1 ~]# kubectl get csr
NAME AGE SIGNERNAME REQUESTOR CONDITION
node-csr-DK-OGn5xCFugBb9_kxatgJYnKzgLsRAubM6HnRCa-08 10m kubernetes.io/kube-apiserver-client-kubelet kubelet-bootstrap Pending
node-csr-it7hIGF76mvRhBDaxemhvu-FzGfzoERiZoMISdu_KQE 2m54s kubernetes.io/kube-apiserver-client-kubelet kubelet-bootstrap Pending

批准申请

[root@k8s-master1 ~]# kubectl certificate approve node-csr-DK-OGn5xCFugBb9_kxatgJYnKzgLsRAubM6HnRCa-08
certificatesigningrequest.certificates.k8s.io/node-csr-DK-OGn5xCFugBb9_kxatgJYnKzgLsRAubM6HnRCa-08 approved
[root@k8s-master1 ~]# kubectl certificate approve node-csr-it7hIGF76mvRhBDaxemhvu-FzGfzoERiZoMISdu_KQE
certificatesigningrequest.certificates.k8s.io/node-csr-it7hIGF76mvRhBDaxemhvu-FzGfzoERiZoMISdu_KQE approved

查看节点

[root@k8s-master1 ~]# kubectl get node
NAME STATUS ROLES AGE VERSION
k8s-node1 NotReady <none> 31s v1.18.5
k8s-node2 NotReady <none> 23s v1.18.5