**二进制搭建kubernetes是api-server起不来
etcd集群正常运行，相关错误及配置如下：**

错误信息

[root@master01 cfg]#
[root@master01 cfg]# /opt/kubernetes/apiserver/bin/kube-apiserver $KUBE_APISERVER_OPTS
I0207 23:14:45.865489    6776 server.go:121] Version: v1.9.0
I0207 23:14:45.866263    6776 services.go:35] Network range for service cluster IPs is unspecified. Defaulting to 10.0.0.0/24.
W0207 23:14:45.866510    6776 authentication.go:378] AnonymousAuth is not allowed with the AllowAll authorizer.  Resetting AnonymousAuth to false. You should use a different authorizer
--etcd-servers must be specified
[root@master01 cfg]#
[root@master01 cfg]#

相关配置

$ vim server-csr.json
{
    "CN": "kubernetes",
    "hosts": [
      "10.0.0.1",
      "127.0.0.1",
      "192.168.145.30",
      "kubernetes",
      "kubernetes.default",
      "kubernetes.default.svc",
      "kubernetes.default.svc.cluster",
      "kubernetes.default.svc.cluster.local"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
            "C": "CN",
            "L": "BeiJing",
            "ST": "BeiJing",
            "O": "k8s",
            "OU": "System"
        }
    ]
}

$ vim /opt/kubernetes/apiserver/cfg/kube-apiserver

KUBE_APISERVER_OPTS="--logtostderr=false \
--log-dir=/opt/kubernetes/logs \
--v=4 \
--etcd-servers=https://192.168.145.30:2379,https://192.168.145.31:2379,https://192.168.145.32:2379 \
--insecure-bind-address=127.0.0.1 \
--bind-address=192.168.145.30 \
--insecure-port=8080 \
--secure-port=6443 \
--advertise-address=192.168.145.30 \
--allow-privileged=true \
--service-cluster-ip-range=10.0.0.1/24 \
--admission-control=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota,NodeRestriction \
--authorization-mode=RBAC,Node \
--kubelet-https=true \
--enable-bootstrap-token-auth \
--token-auth-file=/opt/kubernetes/apiserver/cfg/token.csv \
--service-node-port-range=30000-50000 \
--tls-cert-file=/opt/kubernetes/apiserver/ssl/server.pem  \
--tls-private-key-file=/opt/kubernetes/apiserver/ssl/server-key.pem \
--client-ca-file=/opt/kubernetes/apiserver/ssl/ca.pem \
--service-account-key-file=/opt/kubernetes/apiserver/ssl/ca-key.pem \
--etcd-cafile=/opt/kubernetes/ssl/ca.pem \
--etcd-certfile=/opt/kubernetes/ssl/server.pem \
--etcd-keyfile=/opt/kubernetes/ssl/server-key.pem"

$ vim /usr/lib/systemd/system/kube-apiserver.service

[Unit]
Description=Kubernetes API Server
Documentation=https://github.com/kubernetes/kubernetes

[Service]
EnvironmentFile=/opt/kubernetes/apiserver/cfg/kube-apiserver
ExecStart=/opt/kubernetes/apiserver/bin/kube-apiserver \$KUBE_APISERVER_OPTS
Restart=on-failure

[Install]
WantedBy=multi-user.target

哪位大佬知道啥原因，咋解决，多谢