atomic / kubernetes-sig

#13 kube-apiserver does not start properly
Closed: fixed Opened by pfischer8989.

Closed: fixed
Reopen Issue

Installed from this:

atomic install --system --system-package=no --name kube-apiserver registry.centos.org/centos/kubernetes-apiserver:latest

It installs fine but when you start it it fails because it cannot write the crt to a directory. Error is as follows:

Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Started kubernetes-apiserver.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Starting kubernetes-apiserver...
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Scope libcontainer-21783-systemd-test-default-dependencies.scope has no PIDs. Refusing.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Scope libcontainer-21783-systemd-test-default-dependencies.scope has no PIDs. Refusing.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Created slice libcontainer_21783_systemd_test_default.slice.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Starting libcontainer_21783_systemd_test_default.slice.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Removed slice libcontainer_21783_systemd_test_default.slice.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Stopping libcontainer_21783_systemd_test_default.slice.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Started libcontainer container kube-apiserver.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Starting libcontainer container kube-apiserver.
Aug 29 13:22:01 cnfc1cnfi01 runc[21783]: I0829 17:22:01.321472 1 server.go:112] Version: v1.7.2
Aug 29 13:22:01 cnfc1cnfi01 runc[21783]: error creating self-signed certificates: open /var/run/kubernetes/apiserver.crt: read-only file system
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Stopped libcontainer container kube-apiserver.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: kube-apiserver.service: main process exited, code=exited, status=1/FAILURE
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Scope libcontainer-21836-systemd-test-default-dependencies.scope has no PIDs. Refusing.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Scope libcontainer-21836-systemd-test-default-dependencies.scope has no PIDs. Refusing.
Aug 29 13:22:01 cnfc1cnfi01 systemd[1]: Created slice libcontainer_21836_systemd_test_default.slice.

This should fix it: https://github.com/CentOS/CentOS-Dockerfiles/pull/148 -- once it's merged the fixed images should be available the next day
Edited by jasonbrooks

OK, this should do it: https://github.com/CentOS/CentOS-Dockerfiles/pull/150 :)

I just tested again, it's fixed now.

Metadata Update from @jasonbrooks:
- Issue assigned to jasonbrooks

Metadata Update from @jasonbrooks:
- Assignee reset
- Issue close_status updated to: fixed
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.