Trung Tran:
Hello guys, I got this issue at the https://kodekloud.com/topic/lab-kube-bench/ labs
./kube-bench --config-dir pwd/cfg --config pwd/cfg/config.yaml
W0914 14:46:58.748291 20192 util.go:96]
Unable to detect running programs for component "controllermanager"
The following "master node" programs have been searched, but none of them have been found:
- kube-controller-manager
- kube-controller
- hyperkube controller-manager
- hyperkube kube-controller-manager
- controller-manager
other benchmark running oke, just the controller manager not found
Trung Tran:
docker ps -a | grep controller this command return nothing.
Trung Tran:
my kube-controller-manager file
- command:
- kube-controller-manager
- --allocate-node-cidrs=true
- --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf
- --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf
- --bind-address=127.0.0.1
- --client-ca-file=/etc/kubernetes/pki/ca.crt
- --cluster-cidr=10.244.0.0/16
- --cluster-name=kubernetes
- --cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt
- --cluster-signing-key-file=/etc/kubernetes/pki/ca.key
- --controllers=*,bootstrapsigner,tokencleaner
- --kubeconfig=/etc/kubernetes/controller-manager.conf
- --leader-elect=true
- --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt
- --root-ca-file=/etc/kubernetes/pki/ca.crt
- --service-account-private-key-file=/etc/kubernetes/pki/sa.key
- --service-cluster-ip-range=10.96.0.0/12
- --use-service-account-credentials=true
- --terminated-pod-gc-threshold=10
- --feature-gates=RotateKubeletServerCertificate=true
Alistair Mackay:
Sometimes the kubelet doesn’t pick up edits to manifest files and you need to give it a kick with
systemctl restart kubelet
You can then do
watch docker ps
to watch for containers starting. Newest will be at the top.
If you see the container appearing and disappearing then you have an error in the manifest.
Trung Tran:
I see, next times if the static pod doesn’t start I will try to restart the kubelet, thanks @Alistair Mackay.
unnivkn:
Hi @Trung Tran you can check this file as well, if something wrong in your edit, you may get some hints here.
