Search code examples
jenkinskubernetescertificatepki

jenkins cannot provision new pods agents after renew certificates - kubeadm alpha certs renew all

Today, it's 366 days since the kubernetes 1.17 cluster is running. Accordingly, All PKI certificates are expired. Since we are using k8s 1.17, we are able to renew certificates

kubeadm alpha certs renew all

everything is OK , except jenkins: still not able to spin off new pods as agents. :(

  • no pipeline agent is able to be Running .. always pending then it's recreated

enter image description here

  • The pb is that "Test Connection" works even thu jenkins was not provision agent

enter image description here

I tried to :

  • Restart kubeapi ( delete the pod kubeapi in kube-system to restart automatically)
  • Safely restart jenkins

After all these trials, the same bahavior in Jenkins :

  • no pipeline agent is able to be Running .. always pending then it's recreated
Solution

  • actually the issue is not jenkins , but it was kubernetes master. actually, i have to restart the control plane. I reboot master tomake sure that all control plane components are refreshed. Issue is fixed now