排查命令（节点上执行）
排查命令（节点上执行）
kubectl describe node node1 | sed -n '/Conditions:/,/Addresses:/p'
systemctl status kubelet --no-pager
journalctl -u kubelet -n 200 --no-pager | grep -i -E 'error|fail|timeout'
ss -lntp | grep -E '10250|10248'常见线索
常见线索
connection refused to apiserver：网络策略/防火墙/控制面异常
certificate has expired：节点时钟或证书轮换问题
failed to run Kubelet / cgroup 报错：运行时或 cgroup 驱动不一致