现有的k8s集群添加到rancher2.4.5中问题

Rancher Server 设置

  • Rancher 版本:2.4.5
  • 安装选项 (Docker install/Helm Chart):
    • 如果是 Helm Chart 安装,需要提供 Local 集群的类型(RKE1, RKE2, k3s, EKS, 等)和版本:
  • 在线或离线部署:现在

下游集群信息

  • Kubernetes 版本: 1.23.0
  • Cluster Type (Local/Downstream):
    • 如果 Downstream,是什么类型的集群?(自定义/导入或为托管 等):

用户信息

  • 登录用户的角色是什么? (管理员/集群所有者/集群成员/项目所有者/项目成员/自定义):root
    • 如果自定义,自定义权限集:

主机操作系统:
centos8
问题描述:
现有的k8s集群(安装方式为kubeadm安装),相关版本为1.23.0。rancher版本为2.4.5.
想通过现有k8集群添加到rancher中,rancher所在版本是否支持k8s集群的1.23版本?
添加后一直显示 Waiting for API to be available,经过查看k8s容器时间和本机时间相差8个小时。目前不确定版本和时间那个的问题。

重现步骤:

结果:

预期结果:

截图:
image

其他上下文信息:

日志
k8s_kube-apiserver_kube-apiserver-k8s-master_kube-system_49e952ae23860286b94a8f9eff6a4abd_3日志
I0821 07:01:55.321817       1 server.go:565] external host was not specified, using 192.168.125.152
I0821 07:01:55.322238       1 server.go:172] Version: v1.23.0
I0821 07:01:55.660636       1 shared_informer.go:240] Waiting for caches to sync for node_authorizer
I0821 07:01:55.662187       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0821 07:01:55.662199       1 plugins.go:161] Loaded 11 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,CertificateSubjectRestriction,ValidatingAdmissionWebhook,ResourceQuota.
I0821 07:01:55.663514       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0821 07:01:55.663526       1 plugins.go:161] Loaded 11 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,CertificateSubjectRestriction,ValidatingAdmissionWebhook,ResourceQuota.
W0821 07:01:55.702450       1 genericapiserver.go:538] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0821 07:01:55.703121       1 instance.go:274] Using reconciler: lease
W0821 07:01:56.189075       1 genericapiserver.go:538] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.190134       1 genericapiserver.go:538] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.200664       1 genericapiserver.go:538] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.201802       1 genericapiserver.go:538] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.206315       1 genericapiserver.go:538] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.209217       1 genericapiserver.go:538] Skipping API node.k8s.io/v1alpha1 because it has no resources.
W0821 07:01:56.220277       1 genericapiserver.go:538] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.220291       1 genericapiserver.go:538] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
W0821 07:01:56.222040       1 genericapiserver.go:538] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0821 07:01:56.222050       1 genericapiserver.go:538] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
W0821 07:01:56.228022       1 genericapiserver.go:538] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
W0821 07:01:56.230857       1 genericapiserver.go:538] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
W0821 07:01:56.233881       1 genericapiserver.go:538] Skipping API apps/v1beta2 because it has no resources.
W0821 07:01:56.233901       1 genericapiserver.go:538] Skipping API apps/v1beta1 because it has no resources.
W0821 07:01:56.235256       1 genericapiserver.go:538] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
I0821 07:01:56.238921       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0821 07:01:56.238932       1 plugins.go:161] Loaded 11 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,CertificateSubjectRestriction,ValidatingAdmissionWebhook,ResourceQuota.
W0821 07:01:56.261292       1 genericapiserver.go:538] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0821 07:01:57.049141       1 secure_serving.go:266] Serving securely on [::]:6443
I0821 07:01:57.049236       1 dynamic_cafile_content.go:156] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0821 07:01:57.054328       1 available_controller.go:491] Starting AvailableConditionController
I0821 07:01:57.054370       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0821 07:01:57.054409       1 dynamic_serving_content.go:131] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0821 07:01:57.060954       1 autoregister_controller.go:141] Starting autoregister controller
I0821 07:01:57.060988       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0821 07:01:57.061015       1 controller.go:83] Starting OpenAPI AggregationController
I0821 07:01:57.061153       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0821 07:01:57.061428       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0821 07:01:57.061434       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0821 07:01:57.061460       1 apf_controller.go:317] Starting API Priority and Fairness config controller
I0821 07:01:57.061462       1 customresource_discovery_controller.go:209] Starting DiscoveryController
I0821 07:01:57.061688       1 dynamic_cafile_content.go:156] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0821 07:01:57.061939       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0821 07:01:57.061945       1 shared_informer.go:240] Waiting for caches to sync for crd-autoregister
I0821 07:01:57.063357       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0821 07:01:57.063363       1 shared_informer.go:240] Waiting for caches to sync for cluster_authentication_trust_controller
I0821 07:01:57.063380       1 dynamic_serving_content.go:131] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0821 07:01:57.088332       1 dynamic_cafile_content.go:156] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0821 07:01:57.091105       1 dynamic_cafile_content.go:156] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0821 07:01:57.097852       1 controller.go:85] Starting OpenAPI controller
I0821 07:01:57.097914       1 naming_controller.go:291] Starting NamingConditionController
I0821 07:01:57.097969       1 establishing_controller.go:76] Starting EstablishingController
I0821 07:01:57.098019       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0821 07:01:57.098037       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0821 07:01:57.098052       1 crd_finalizer.go:266] Starting CRDFinalizer
I0821 07:01:57.154647       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0821 07:01:57.161021       1 cache.go:39] Caches are synced for autoregister controller
I0821 07:01:57.161331       1 shared_informer.go:247] Caches are synced for node_authorizer 
I0821 07:01:57.161502       1 apf_controller.go:322] Running API Priority and Fairness config worker
I0821 07:01:57.161690       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0821 07:01:57.166328       1 shared_informer.go:247] Caches are synced for crd-autoregister 
I0821 07:01:57.166933       1 shared_informer.go:247] Caches are synced for cluster_authentication_trust_controller 
I0821 07:01:57.214891       1 controller.go:611] quota admission added evaluator for: leases.coordination.k8s.io
I0821 07:01:58.049470       1 controller.go:132] OpenAPI AggregationController: action for item : Nothing (removed from the queue).
I0821 07:01:58.049498       1 controller.go:132] OpenAPI AggregationController: action for item k8s_internal_local_delegation_chain_0000000000: Nothing (removed from the queue).
I0821 07:01:58.064791       1 storage_scheduling.go:109] all system priority classes are created successfully or already exist.
I0821 07:01:59.672503       1 controller.go:611] quota admission added evaluator for: events.events.k8s.io
I0821 07:02:26.282056       1 controller.go:611] quota admission added evaluator for: endpoints
I0821 07:02:26.315703       1 controller.go:611] quota admission added evaluator for: endpointslices.discovery.k8s.io
 k8s_POD_kube-apiserver-k8s-master_kube-system_49e952ae23860286b94a8f9eff6a4abd_3日志
无日志

版本兼容问题,2.4.5 不支持 K8s 1.24,可参考支持矩阵:Support matrix | SUSE