Troubleshooting CLI Issues

Kubectl

API Server Unreachable

Invalid Token in Kubeconfig

Etcdctl

Incorrect Endpoint(s)

Authentication Handshake Failed: EOF This error may be encountered as a result of an improper or unreachable target within the specified endpoints.

# ETCDCTL_API=3 etcdctl --cacert /etc/pf9/kube.d/certs/etcdctl/etcd/ca.crt --cert /etc/pf9/kube.d/certs/etcdctl/etcd/request.crt --key /etc/pf9/kube.d/certs/etcdctl/etcd/request.key member list
{"level":"warn","ts":"2021-06-29T17:35:33.700Z","caller":"clientv3/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"endpoint://client-17003473-68d9-4280-9775-c88d055dcab4/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: all SubConns are in TransientFailure, latest connection error: connection error: desc = \"transport: authentication handshake failed: EOF\""}
Error: context deadline exceeded

Certificates Not Specified

Networking Issues

If your nodes are deployed on an internal network, (e.g. a node deployed on any of the following: AWS private network, OpenStack tenant network, VMware NSX tenant/private network) you must specify the internal IP of the node as a parameter to the CLI.

If in doubt, run ifconfig on the node, then see what IP address gets reported and specify that IP. Your external IP will not get reported by ifconfig as that is configured external to the node.

Type to search, ESC to discardType to search, ESC to discardType to search, ESC to discard