kube-proxy无法安装iptables规则

Question

我正在尝试遵循https://github.com/GoogleCloudPlatform/kubernetes/blob/master/examples/guestbook/README.md的kubernetes guestbook示例

在第六步中:我修改了json文件以允许从外部访问guestbook站点。修改为: 10.11.22.33替换为my IP，去掉“”createExternalLoadBalancer“”：true“

当我在浏览器中尝试http://<my ip>:8000时，连接失败。通过一些调试搜索，我发现kube-proxy安装iptables规则失败，错误日志如下。日志还告诉我们，对于其他服务，安装iptable规则也会失败。

有什么建议吗？

Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.543645     629 proxier.go:563] Failed to install iptables KUBE-PORTALS-HOST rule for service "frontend"
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.543685     629 proxier.go:377] Failed to ensure portal for "frontend": error checking rule: exit status 2: iptables v1.4.21: Port `:f816:3eff:fedf:8037]:51072' not valid
Mar 19 06:23:28 centos-minion kube-proxy[629]: Try `iptables -h' or 'iptables --help' for more information.
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.548287     629 proxier.go:563] Failed to install iptables KUBE-PORTALS-HOST rule for service "kubernetes-ro"
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.548310     629 proxier.go:377] Failed to ensure portal for "kubernetes-ro": error checking rule: exit status 2: iptables v1.4.21: Port `:f816:3eff:fedf:8037]:47447' not valid
Mar 19 06:23:28 centos-minion kube-proxy[629]: Try `iptables -h' or 'iptables --help' for more information.
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.555138     629 proxier.go:563] Failed to install iptables KUBE-PORTALS-HOST rule for service "kubernetes"
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.555161     629 proxier.go:377] Failed to ensure portal for "kubernetes": error checking rule: exit status 2: iptables v1.4.21: Port `:f816:3eff:fedf:8037]:53103' not valid
Mar 19 06:23:28 centos-minion kube-proxy[629]: Try `iptables -h' or 'iptables --help' for more information.
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.560348     629 proxier.go:563] Failed to install iptables KUBE-PORTALS-HOST rule for service "redis-master"
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.560366     629 proxier.go:377] Failed to ensure portal for "redis-master": error checking rule: exit status 2: iptables v1.4.21: Port `:f816:3eff:fedf:8037]:37187' not valid
Mar 19 06:23:28 centos-minion kube-proxy[629]: Try `iptables -h' or 'iptables --help' for more information.
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.565802     629 proxier.go:563] Failed to install iptables KUBE-PORTALS-HOST rule for service "redis-slave"
Mar 19 06:23:28 centos-minion kube-proxy[629]: E0319 06:23:28.565824     629 proxier.go:377] Failed to ensure portal for "redis-slave": error checking rule: exit status 2: iptables v1.4.21: Port `:f816:3eff:fedf:8037]:55949' not valid

..。

Answer 1

一些较旧版本的Kubernetes在选择某些配置(Issue 4218)中的主机接口时遇到了问题。看起来这就是这里正在发生的事情。

不幸的是，唯一真正的答案是更新到更新版本的Kubernetes (重新部署您的集群)。