Unable to connect to the server: x509: certificate signed by unknown authority about kubernetes-handbook HOT 7 CLOSED

KUBE_API_ARGS="--authorization-mode=RBAC --runtime-config=rbac.authorization.k8s.io/v1beta1 --kubelet-https=true --experimental-bootstrap-token-auth --token-auth-file=/etc/kubernetes/token.csv --service-node-port-range=30000-32767 --tls-cert-file=/etc/kubernetes/ssl/kubernetes.pem --tls-private-key-file=/etc/kubernetes/ssl/kubernetes-key.pem --client-ca-file=/etc/kubernetes/ssl/ca.pem --service-account-key-file=/etc/kubernetes/ssl/ca-key.pem --etcd-cafile=/etc/kubernetes/ssl/ca.pem --etcd-certfile=/etc/kubernetes/ssl/kubernetes.pem --etcd-keyfile=/etc/kubernetes/ssl/kubernetes-key.pem --enable-swagger-ui=true --apiserver-count=3 --audit-log-maxage=30 --audit-log-maxbackup=3 --audit-log-maxsize=100 --audit-log-path=/var/lib/audit.log --event-ttl=1h"

[root@k8s-master ssl]# journalctl -xef -u kubelet
-- Logs begin at 三 2017-08-16 02:59:44 CST. --
8月 16 03:00:04 k8s-master systemd[1]: Started Kubernetes Kubelet Server.
-- Subject: Unit kubelet.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit kubelet.service has finished starting up.
-- 
-- The start-up result is done.
8月 16 03:00:04 k8s-master systemd[1]: Starting Kubernetes Kubelet Server...
-- Subject: Unit kubelet.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit kubelet.service has begun starting up.
8月 16 03:00:05 k8s-master kubelet[2680]: Flag --api-servers has been deprecated, Use --kubeconfig instead. Will be removed in a future version.
8月 16 03:00:05 k8s-master kubelet[2680]: I0816 03:00:05.138984    2680 feature_gate.go:144] feature gates: map[]
8月 16 03:00:05 k8s-master kubelet[2680]: error: failed to run Kubelet: cannot create certificate signing request: User "kubelet-bootstrap" cannot create certificatesigningrequests.certificates.k8s.io at the cluster scope. (post certificatesigningrequests.certificates.k8s.io)
8月 16 03:00:05 k8s-master systemd[1]: kubelet.service: main process exited, code=exited, status=1/FAILURE
8月 16 03:00:05 k8s-master systemd[1]: Unit kubelet.service entered failed state.
8月 16 03:00:05 k8s-master systemd[1]: kubelet.service failed.