TASK [kubernetes/master : kubeadm | Enable kube-proxy] **************************************************************************************************************************************************************************
FAILED - RETRYING: kubeadm | Enable kube-proxy (10 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (9 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (8 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (7 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (6 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (5 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (4 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (3 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (2 retries left).
FAILED - RETRYING: kubeadm | Enable kube-proxy (1 retries left).
fatal: [node2]: FAILED! => {"attempts": 10, "changed": false, "cmd": ["/usr/local/bin/kubeadm", "alpha", "phase", "addon", "kube-proxy", "--config=/etc/kubernetes/kubeadm-config.v1alpha3.yaml"], "delta": "0:00:00.032978", "end": "2019-01-07 19:25:21.213242", "msg": "non-zero return code", "rc": 1, "start": "2019-01-07 19:25:21.180264", "stderr": "error when creating kube-proxy service account: unable to create serviceaccount: Post https://192.168.168.168:6443/api/v1/namespaces/kube-system/serviceaccounts: dial tcp 192.168.168.168:6443: connect: connection refused", "stderr_lines": ["error when creating kube-proxy service account: unable to create serviceaccount: Post https://192.168.168.168:6443/api/v1/namespaces/kube-system/serviceaccounts: dial tcp 192.168.168.168:6443: connect: connection refused"], "stdout": "", "stdout_lines": []}
解决方法是关闭192.168.168.168的防火墙，执行：
systemctl stop firewalld
systemctl disable firewalld