You need to enable JavaScript to run this app.
优惠活动
大模型
产品
解决方案
定价
更多

Kubernetes集群外配置Prometheus遇x509证书未知签发方错误求助

在Kubernetes集群外部配置Prometheus时遇到证书验证错误

我正尝试在Kubernetes集群外部配置Prometheus,以下是我的Prometheus配置:

- job_name: 'kubernetes-apiservers'
  kubernetes_sd_configs:
  - role: endpoints
    api_server: https://10.0.4.155:6443
    scheme: https
    tls_config:
      insecure_skip_verify: true
    basic_auth:
      username: kube
      password: Superkube01
  relabel_configs:
  - source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name]
    action: keep
    regex: default;kubernetes;https

我的Kubernetes集群相关信息如下:

root@master01:~# kubectl cluster-info
Kubernetes master is running at https://10.0.4.155:6443

root@master01:~# kubectl get endpoints
NAME                ENDPOINTS                                  AGE
kubernetes          10.0.4.103:6443,10.0.4.138:6443,10.0.4.155:6443   11h
netchecker-service  10.2.0.10:8081                             11h
root@master01:~#

但启动Prometheus时出现了如下错误:

level=error ts=2018-05-29T13:55:08.171451623Z caller=main.go:216 component=k8s_client_runtime err="github.com/prometheus/prometheus/discovery/kubernetes/kubernetes.go:270: Failed to list *v1.Pod: Get https://10.0.4.155:6443/api/v1/pods?resourceVersion=0: x509: certificate signed by unknown authority"

恳请各位告知我问题出在哪里?谢谢!


内容的提问来源于stack exchange,提问作者R Pavanasam

相关产品推荐
方舟 Agent Plan

超全模态模型 × Harness 升级,最新支持 Deepseek-V4.1-Flash、GLM-5.3 系列、Doubao-Seedream-5.0-pro、Kimi-K3 (部分), 限时 9.9 元起

最近更新时间:2026.05.29 07:56:29