错误：在 Azure Kubernetes 服务 (AKS) 中轮换证书

Question

我使用https://docs.microsoft.com/en-us/azure/aks/certificate-rotation这个链接在 AKS 中轮换证书。 证书已更新，但我的集群在失败的 state 中。 因此，我的应用程序已关闭。

运行此命令az aks rotate-certs -g $RESOURCE_GROUP_NAME -n $CLUSTER_NAME时出现以下错误

错误： "error": { "code": "ErrorCodeRotateClusterCertificates", "message": "VMASAgentPoolReconciler retry failed: Category: ClientError; SubCode: OutboundConnFailVMExtensionError; Dependency: Microsoft.Compute/virtualMachines/extensions; OrginalError: Code=\"VMExtensionProvisioningError\" Message=\"VM has reported a failure when processing extension 'cse-agent-0'. Error message: \\\"Enable failed: failed to execute command: command terminated with exit status=50\\n[stdout]\\n\\n[stderr]\\ncurl: option --proxy-insecure: is unknown\\ncurl: try 'curl --help' or 'curl --manual' for more information\\nCommand exited with non-zero status 2\\n0.00user 0.00system 0:00.00elapsed 100%:.(MISSING)C(string=VMAS agent pools reconciling)PU (0avgtext+0avgdata 7044maxresident)k\\n0inputs+8outputs (0major+372minor)pagefaults 0swaps\\n\\\"\\r\\n\\r\\nMore information on troubleshooting is available at https;//aka:ms/VMExtensionCSELinuxTroubleshoot \", AKSTeam: NodeProvisioning, Retriable: false" } } "error": { "code": "ErrorCodeRotateClusterCertificates", "message": "VMASAgentPoolReconciler retry failed: Category: ClientError; SubCode: OutboundConnFailVMExtensionError; Dependency: Microsoft.Compute/virtualMachines/extensions; OrginalError: Code=\"VMExtensionProvisioningError\" Message=\"VM has reported a failure when processing extension 'cse-agent-0'. Error message: \\\"Enable failed: failed to execute command: command terminated with exit status=50\\n[stdout]\\n\\n[stderr]\\ncurl: option --proxy-insecure: is unknown\\ncurl: try 'curl --help' or 'curl --manual' for more information\\nCommand exited with non-zero status 2\\n0.00user 0.00system 0:00.00elapsed 100%:.(MISSING)C(string=VMAS agent pools reconciling)PU (0avgtext+0avgdata 7044maxresident)k\\n0inputs+8outputs (0major+372minor)pagefaults 0swaps\\n\\\"\\r\\n\\r\\nMore information on troubleshooting is available at https;//aka:ms/VMExtensionCSELinuxTroubleshoot \", AKSTeam: NodeProvisioning, Retriable: false" } }

请帮助解决此问题。

Answer 1

您在节点上运行的是哪个版本的 Ubuntu？ 根据该错误，猜测 Ubuntu 16.04 或更早版本。

我不确定它是否会起作用，但是您可以尝试升级节点而不是尝试轮换证书吗？

您可能还想考虑只创建一个新集群，并使用 VMSS 而不是 VMAS。