Kubespray : Netchecker连接检查失败

Question

我在OpenStack实例上部署了一个Kubernetes (v1.17.5)集群。这些实例是在一瞥中导入的CentOS 7.6.1811 qcow2镜像。

安装成功，我可以使用kubectl命令查看我的节点和pod。

我使用deploy_netchecker选项在集群中部署NetChecker和测试网络，并设置network_plugin="flannel"。我也尝试过kube_proxy_mode="iptables"，但它似乎不会影响结果。这几乎就是我在k8s-cluster.yml文件中所做的所有更改。

所有的pod都在运行，服务也在运行：

[centos@cl1-master-0 ~]$ kubectl get svc --all-namespaces
NAMESPACE     NAME                        TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                  AGE
default       kubernetes                  ClusterIP   10.233.0.1      <none>        443/TCP                  46h
default       netchecker-service          NodePort    10.233.13.213   <none>        8081:31081/TCP           46h
kube-system   coredns                     ClusterIP   10.233.0.3      <none>        53/UDP,53/TCP,9153/TCP   46h
kube-system   dashboard-metrics-scraper   ClusterIP   10.233.59.12    <none>        8000/TCP                 46h
kube-system   kubernetes-dashboard        ClusterIP   10.233.63.20    <none>        443/TCP                  46h

但netchecker API给出了以下答案：

[root@localhost ~]# curl http://X.X.X.X:31081/api/v1/connectivity_check
{"Message":"Connectivity check fails. Reason: there are absent or outdated pods; look up the payload","Absent":["netchecker-agent-hostnet-kk56x","netchecker-agent-hostnet-klldn","netchecker-agent-hostnet-r2vqs","netchecker-agent-hostnet-wqhjs"],"Outdated":["netchecker-agent-4jsgf","netchecker-agent-c9pcf","netchecker-agent-hostnet-jzbfv","netchecker-agent-vxgpf"]}

由于未知的原因，我无法从带有localhost的集群节点访问接口，所以我使用了带有OpenStack的浮动IP。

以下是来自代理的一些日志：

[centos@cl1-master-0 ~]$ sudo vi /var/log/pods/default_netchecker-agent-vjnwl_d8290268-3ea4-4e3c-acb4-295ab162a735/netchecker-agent/0.log
{"log":"I0701 13:04:01.814246       1 agent.go:135] Response status code: 200\n","stream":"stderr","time":"2020-07-01T13:04:01.81437579Z"}
{"log":"I0701 13:04:01.814272       1 agent.go:128] Sleep for 15 second(s)\n","stream":"stderr","time":"2020-07-01T13:04:01.814393199Z"}
{"log":"I0701 13:04:16.817398       1 agent.go:55] Send payload via URL: http://netchecker-service:8081/api/v1/agents/netchecker-agent-vjnwl\n","stream":"stderr","time":"2020-07-01T13:04:16.817786735Z"}

[centos@cl1-master-0 ~]$ sudo vi /var/log/pods/default_netchecker-agent-hostnet-klldn_d5fa6e72-885f-44e1-97a6-880a25e6d6d6/netchecker-agent/0.log
{"log":"E0701 13:05:22.804428       1 agent.go:133] Error while sending info. Details: Post http://netchecker-service:8081/api/v1/agents/netchecker-agent-hostnet-klldn: dial tcp 10.233.13.213:8081: i/o timeout\n","stream":"stderr","time":"2020-07-01T13:05:22.805138032Z"}
{"log":"I0701 13:05:22.804474       1 agent.go:128] Sleep for 15 second(s)\n","stream":"stderr","time":"2020-07-01T13:05:22.805190295Z"}
{"log":"I0701 13:05:37.807140       1 agent.go:55] Send payload via URL: http://netchecker-service:8081/api/v1/agents/netchecker-agent-hostnet-klldn\n","stream":"stderr","time":"2020-07-01T13:05:37.807309111Z"}

来自服务器的日志不会指示任何错误。

我尝试使用以下内容检查DNS解析：

[centos@cl1-master-0 ~]$ kubectl exec -it netchecker-agent-4jsgf -- /bin/sh
/ $ nslookup kubernetes.default
Server:    169.254.25.10
Address 1: 169.254.25.10

nslookup: can't resolve 'kubernetes.default'

[centos@cl1-master-0 ~]$ kubectl exec -it netchecker-agent-4jsgf -- cat /etc/resolv.conf
nameserver 169.254.25.10
search default.svc.cluster.local svc.cluster.local cluster.local openstacklocal
options ndots:5

169.254.25.10是nodelocaldns的IP，但似乎没有查询部署的coredns服务。当我使用带有coredns IP的nslookup netchecker-service.default.svc.cluster.local 10.233.0.3时，我得到了正确的答案。

我的配置可能有什么问题？

提前感谢

更新:插件Flannel有一个issue，并包含一个可应用于集群所有节点的修复。完成后，pods会成功报告回netchecker服务器。

Answer 1

更新:插件Flannel有一个issue，并包含一个可应用于集群所有节点的修复。完成后，pods会成功报告回netchecker服务器。