timeout to create kube-apiserver to kubelet RBAC

[JinAirsOs]

TASK [k8s-setup : Create kube-apiserver to kubelet RBAC] **************************************************************************************************************************************************
Tuesday 20 April 2021 20:30:08 +0800 (0:00:01.632) 0:03:44.899 *********
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (10 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (9 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (8 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (7 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (6 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (5 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (4 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (3 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (2 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (1 retries left).
fatal: [10.85.246.115 -> 10.85.246.115]: FAILED! => {"attempts": 10, "changed": true, "cmd": ["/usr/local/bin/kubectl", "--kubeconfig=/etc/kubernetes/admin.conf", "apply", "-f", "/tmp/apiserver-to-kubelet-rbac.yml"], "delta": "0:00:30.385037", "end": "2021-04-20 20:36:06.896236", "msg": "non-zero return code", "rc": 1, "start": "2021-04-20 20:35:36.511199", "stderr": "Unable to connect to the server: dial tcp 10.85.247.115:6443: i/o timeout", "stderr_lines": ["Unable to connect to the server: dial tcp 10.85.247.115:6443: i/o timeout"], "stdout": "", "stdout_lines": []}

[JinAirsOs]

It is failed on centos7 of production but it is succeeded on vagrant vms. I am so confused about it.

[JinAirsOs]

@kairen can u give me some advices ? thx very much!

[JinAirsOs]

I see the 6443. were listening and telnet it can connect. But when use kubectl --kubeconfig=/etc/kubernetes/admin.conf to apply the rbac file. It shows with timeout.

[JinAirsOs]

TASK [k8s-setup : Wait for Kubernetes core component start] ***********************************************************************************************************************************************
Wednesday 21 April 2021 10:45:23 +0800 (0:00:02.202) 0:03:15.048 *******

ok: [10.85.246.115] => (item=6443)
ok: [10.85.246.115] => (item=6443)
ok: [10.85.246.115] => (item=10252)
ok: [10.85.246.115] => (item=10251)

TASK [k8s-setup : include_tasks] **************************************************************************************************************************************************************************
Wednesday 21 April 2021 10:45:44 +0800 (0:00:21.008) 0:03:36.056 *******
included: /home/panzhendong02/kube-ansible/roles/k8s-setup/tasks/setup-resources.yml for 10.85.246.115

TASK [k8s-setup : Copy kube-apiserver to kubelet rbac yaml] ***********************************************************************************************************************************************
Wednesday 21 April 2021 10:45:44 +0800 (0:00:00.112) 0:03:36.169 *******
ok: [10.85.246.115 -> 10.85.246.115] => (item=apiserver-to-kubelet-rbac.yml)
ok: [10.85.246.115 -> 10.85.246.115] => (item=kubelet-bootstrap-rbac.yml)

TASK [k8s-setup : Copy TLS bootstrap secret template] *****************************************************************************************************************************************************
Wednesday 21 April 2021 10:45:47 +0800 (0:00:03.216) 0:03:39.386 *******
ok: [10.85.246.115 -> 10.85.246.115]

TASK [k8s-setup : Create kube-apiserver to kubelet RBAC] **************************************************************************************************************************************************
Wednesday 21 April 2021 10:45:49 +0800 (0:00:01.624) 0:03:41.011 *******
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (10 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (9 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (8 retries left).
FAILED - RETRYING: Create kube-apiserver to kubelet RBAC (7 retries left).

[JinAirsOs]

anyone can help ?