This is a community wiki answer based on the comments above and posted for better visibility. Feel free to expand it.
kubectl exec
command may override the hostname in the certificate and use FQDN instead. Adding the --hostname-override
parameter to the kubelet config:
If non-empty, will use this string as identification instead of the
actual hostname. If --cloud-provider
is set, the cloud provider
determines the name of the node (consult cloud provider documentation
to determine if and how the hostname is used).
and restarting the service will fix the issue.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…