现象:K8S 组件报 server returned HTTP status 401 Unauthorized，看apiserver 日志有很多Unable to authenticate the request" err="[x509: certificate has expired or is not yet
1、分析：是因为集群证书更新了，然而使用kubectl delete pods方式 去重启组件是没生效的，需要通过docker restart 方式重启组件服务才行
2、通过 docker ps -a|egrep "scheduler|kube-controller" 查看没有重启的次数，需要执行docker restart 容器id 即可
- kube-controller-manager Unauthorized controller scheduler returnedkube-controller-manager unauthorized controller kube-controller-manager kube-controller-manager controller manager kube nodelifecyclecontroller kube-controller-manager kube-controller-manager taintmanager controller kube-controller-manager分布式controller unauthorized user_unauthorized configuration unauthorized failed server unauthorized response indicate success