问题
首先最初问题：
[root@k8s-master ~]# kubectl get pods -owide --all-namespaces
The connection to the server 192.168.2.129:6443 was refused - did you specify the right host or port?
检查kubelet状态
查看kubelet status报找不到master节点
[root@k8s-master ~]# systemctl status kubelet
● kubelet.service - kubelet: The Kubernetes Node Agent
Loaded: loaded (/usr/lib/systemd/system/kubelet.service; enabled; vendor preset: disabled)
Drop-In: /usr/lib/systemd/system/kubelet.service.d
└─10-kubeadm.conf
Active: active (running) since 四 2025-04-17 10:22:59 CST; 5min ago
Docs: https://kubernetes.io/docs/
Main PID: 1213 (kubelet)
Tasks: 17
Memory: 170.7M
CGroup: /system.slice/kubelet.service
└─1213 /usr/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --config=/var/lib/kubelet/config.yaml --network-plugin=cni --pod-infra-container-image=registr...
解决办法更新k8s集群证书
[root@k8s-master ~]# sudo kubeadm certs renew all
[renew] Reading configuration from the cluster...
[renew] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'
certificate embedded in the kubeconfig file for the admin to use and for kubeadm itself renewed
certificate for serving the Kubernetes API renewed
certificate the apiserver uses to access etcd renewed
certificate for the API server to connect to kubelet renewed
certificate embedded in the kubeconfig file for the controller manager to use renewed
certificate for liveness probes to healthcheck etcd renewed
certificate for etcd nodes to communicate with each other renewed
certificate for serving etcd renewed
certificate for the front proxy client renewed
certificate embedded in the kubeconfig file for the scheduler manager to use renewed
Done renewing certificates. You must restart the kube-apiserver, kube-controller-manager, kube-scheduler and etcd, so that they can use the new certificates.
成功运行
[root@k8s-master ~]# kubectl get pods
NAME READY STATUS RESTARTS AGE
adservice-78b57fcf87-n252v 2/2 Running 0 13m
cartservice-55777c7ffd-sh2xd 2/2 Running 0 13m
checkoutservice-f5b7689d5-j6drp 2/2 Running 0 13m
currencyservice-5c454c8b5-t92l9 2/2 Running 0 13m
emailservice-67cf544dc-x4sxj 2/2 Running 1 (12m ago) 13m
frontend-c958f56fb-qtt2d 2/2 Running 0 13m
loadgenerator-578d9f8456-ljqnn 2/2 Running 0 13m
paymentservice-688f5649f5-57dfh 2/2 Running 0 13m
productcatalogservice-7cd48ddfc7-mp8z6 2/2 Running 0 13m
recommendationservice-7dc9f5f575-8zqkm 2/2 Running 1 (12m ago) 13m
redis-cart-849bbcb78b-6c4dw 2/2 Running 0 13m
shippingservice-56d97db699-hghmq 2/2 Running 0 13m
