2016-10-04 116 views
0

我安裝了CoreOS beta(1153.4.0)。locksmithd無法與etcd正常工作tls

我有etcd2與tls配置並正常工作。

我想配置locksmithd通過更新/var/lib/coreos-install/user_data和增加與TLS證書的工作:

coreos: 
    locksmith: 
    endpoint: "https://coreos-2.tux-in.com:2379,https://coreos-3.tux-in.com:2379" 
    etcd_cafile: /etc/ssl/etcd/ca.pem 
    etcd_certfile: /etc/ssl/etcd/etcd1.pem 
    etcd_keyfile: /etc/ssl/etcd/etcd1-key.pem 

其創建的文件/run/systemd/system/locksmithd.service.d/20-cloudinit.conf與內容:

[Service] 
Environment="LOCKSMITHD_ENDPOINT=https://coreos-2.tux-in.com:2379" 
Environment="LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.pem" 
Environment="LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/etcd1.pem" 
Environment="LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/etcd1-key.pem" 

locksmithctl status回報Error initializing etcd client: client: etcd cluster is unavailable or misconfigured

如何進一步調試此問題?或者甚至更好..解決它? :)

有關該問題的任何信息將不勝感激。

+0

在https://github.com/coreos/bugs/issues/1595創建了一個錯誤報告 – ufk

回答

0

需要在兩臺服務器上運行systemctl unmask update-engine.service,現在鎖匠運行正常,如果我鎖定了其中一臺服務器,另一臺服務器通過'locksmithctl status'注意到它。

一切正常。