skydns无法解析kubernetes集群中的dns

Question

我正在为kubernetes设置skydns，遵循这个模板http://kubernetes.io/docs/getting-started-guides/docker-multinode/skydns.yaml.in。但是它不能解析dns。在寻找解决方案后，还在kube2sky参数中添加了-kube_master_url，但仍然存在相同的问题。以下是skydns的日志：

2016/04/23 02:49:26 skydns: falling back to default configuration,  could not read from etcd: 501: All the given peers are not reachable (failed to propose on members [http://127.0.0.1:4001] twice [last error: Get http://127.0.0.1:4001/v2/keys/skydns/config?quorum=false&recursive=false&sorted=false: dial tcp 127.0.0.1:4001: connection refused]) [0]
2016/04/23 02:49:26 skydns: ready for queries on cluster.local. for tcp://0.0.0.0:53 [rcache 0]
2016/04/23 02:49:26 skydns: ready for queries on cluster.local. for udp://0.0.0.0:53 [rcache 0]
2016/04/23 02:49:33 skydns: error from backend: 501: All the given peers are not reachable (failed to propose on members [http://127.0.0.1:4001] twice [last error: Get http://127.0.0.1:4001/v2/keys/skydns/local/cluster/svc/default/kubernetes?quorum=false&recursive=true&sorted=false: dial tcp 127.0.0.1:4001: connection refused]) [0]

有什么建议吗？Kube2sky日志：

I0423 02:49:39.286489       1 kube2sky.go:436] Etcd server found:  http://127.0.0.1:4001
I0423 02:49:40.295909       1 kube2sky.go:503] Using http://172.17.0.1:8080 for kubernetes master
I0423 02:49:40.296183       1 kube2sky.go:504] Using kubernetes API v1

Answer 1

我设置了一些iptables规则，它们阻塞了运行kubernetes服务(包括skydns )的docker0接口上的连接。因此，第一个问题似乎是我的本地设置而不是skydns。

然而，在安装本地docker注册表后，问题再次出现，我得到了这个错误：

I0427 20:30:45.183419 1 kube2sky.go:627] Ignoring error while waiting  for service default/kubernetes: Get https://10.0.0.1:443/api/v1/namespaces/default/services/kubernetes: x509: certificate signed by unknown authority. Sleeping 1s before retrying.

作为一种解决办法，我使用kubectl delete secrets/default-token-q4siz删除了秘密，然后重启了skydns，它又开始工作了。