πŸ› οΈ УстранСниС Π½Π΅ΠΏΠΎΠ»Π°Π΄ΠΎΠΊ kubectl Ошибка: The connection to the server 10.2.67.201:6443 was refused – did you specify the right host or port?

by itisgood

Π­Ρ‚ΠΎΡ‚ Π΄ΠΎΠΊΡƒΠΌΠ΅Π½Ρ‚ описываСт шаги для устранСния ошибки kubectl:

The connection to the server x.x.x.x:6443 was refused - did you specify the right host or port?

1. kubectl Π΄ΠΎΠ»ΠΆΠ΅Π½ выполятся Π½Π° мастСр-ΡƒΠ·Π»Π΅.

2. Π£ Ρ‚Π΅ΠΊΡƒΡ‰Π΅Π³ΠΎ ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Ρ Π΄ΠΎΠ»ΠΆΠ½Π° Π±Ρ‹Ρ‚ΡŒ пСрСмСнная срСды ΠΊΠΎΠ½Ρ„ΠΈΠ³ΡƒΡ€Π°Ρ†ΠΈΠΈ кластСра Kubernetes (подробности ΠΎ Ρ‚ΠΎΠΌ, ΠΊΠ°ΠΊ это ΡΠ΄Π΅Π»Π°Ρ‚ΡŒ, пСрСчислСны Π² Ρ€Π°Π·Π΄Π΅Π»Π΅ ΠŸΠΎΠ΄Π³ΠΎΡ‚ΠΎΠ²ΠΊΠ° ΠΊ использованию Kubernetes Π² качСствС ΠΎΠ±Ρ‹Ρ‡Π½ΠΎΠ³ΠΎ ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»Ρ), Π½Π°ΠΏΡ€ΠΈΠΌΠ΅Ρ€:

$ env | grep -i kube
KUBECONFIG=/root/.kube/config
3. Π‘Π»ΡƒΠΆΠ±Π°Β  docker Π΄ΠΎΠ»ΠΆΠ½Π° Π±Ρ‹Ρ‚ΡŒ Π·Π°ΠΏΡƒΡ‰Π΅Π½Π°:
$ systemctl status docker
● docker.service - Docker Application Container Engine
Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/docker.service.d
└─docker-sysconfig.conf, http-proxy.conf, nfs.conf
Active: active (running) since Wed 2019-01-30 13:14:36 NZDT; 21h ago
Docs: https://docs.docker.com
Main PID: 5834 (dockerd)
Tasks: 89
Memory: 189.2M
...
4. БСрвис kubelet Π΄ΠΎΠ»ΠΆΠ΅Π½ Π±Ρ‹Ρ‚ΡŒ Π·Π°ΠΏΡƒΡ‰Π΅Π½:
$ systemctl status kubelet
● kubelet.service - kubelet: The Kubernetes Node Agent
Loaded: loaded (/etc/systemd/system/kubelet.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/kubelet.service.d
└─10-kubeadm.conf
Active: active (running) since Thu 2019-01-31 10:36:55 NZDT; 8min ago
Docs: http://kubernetes.io/docs/
Main PID: 16249 (kubelet)
Tasks: 18
Memory: 48.4M
...

Если Π²Ρ‹ ΠΏΠΎΠ»ΡƒΡ‡Π°Π΅Ρ‚Π΅ ΠΎΡˆΠΈΠ±ΠΊΡƒ:

Unit kubelet.service entered failed state.
systemd[1]: kubelet.service failed.

ΠŸΠΎΠΏΡ€ΠΎΠ±ΡƒΠΉΡ‚Π΅:

swapoff -a

5. TCP-ΠΏΠΎΡ€Ρ‚ 6443 Π΄ΠΎΠ»ΠΆΠ΅Π½ Π±Ρ‹Ρ‚ΡŒ ΡƒΠΊΠ°Π·Π°Π½ ΠΊΠ°ΠΊ ΠΏΠΎΡ€Ρ‚ ΠΏΡ€ΠΎΡΠ»ΡƒΡˆΠΈΠ²Π°Π½ΠΈΡ:

# netstat -pnlt | grep 6443
tcp6 0 0 :::6443 :::* LISTEN 4546/kube-apiserver
Если TCP-ΠΏΠΎΡ€Ρ‚ 6443 нСдоступСн, ΠΏΡ€ΠΎΠ²Π΅Ρ€ΡŒΡ‚Π΅ соотвСтствиС ΠΏΡ€Π°Π²ΠΈΠ» брандмауэра / iptables:
$ firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: eno1
sources:
services: ssh dhcpv6-client
ports: 10250/tcp 8472/udp 6443/tcp
protocols:
masquerade: yes
forward-ports:
source-ports:
icmp-blocks:
rich rules:
Π’Π°ΠΊΠΆΠ΅ ΠΏΡ€ΠΎΠ²Π΅Ρ€ΡŒΡ‚Π΅ Π»ΠΎΠ³ΠΈ kubelet:
# journalctl -xeu kubelet

6. ΠŸΠΎΠΏΡ€ΠΎΠ±ΡƒΠΉΡ‚Π΅ ΠΏΠ΅Ρ€Π΅Π·Π°ΠΏΡƒΡΡ‚ΠΈΡ‚ΡŒ кластСр Kubernetes, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΉ Ρ‚Π°ΠΊΠΆΠ΅ Π²Ρ‹ΠΏΠΎΠ»Π½ΠΈΡ‚ Π½Π΅ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Π΅ основныС ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ:

$ kubeadm-setup.sh restart
Restarting containers now ...
Detected node is master ...
Checking if env is ready ...
Checking whether docker can pull busybox image ...
Checking access to ca-docker-registry.us.oracle.com/kubernetes_developer ...
Trying to pull repository ca-docker-registry.us.oracle.com/kubernetes_developer/pause-amd64 ...
3.0: Pulling from ca-docker-registry.us.oracle.com/kubernetes_developer/pause-amd64
Digest: sha256:f037e4f1990d76b0711e00035d0aeb0869ff9c4ece517e0a90af4ea3f601760e
Status: Image is up to date for ca-docker-registry.us.oracle.com/kubernetes_developer/pause-amd64:3.0
Checking firewalld settings ...
Checking iptables default rule ...
Checking br_netfilter module ...
Checking sysctl variables ...
Restarting kubelet ...
Waiting for node to restart ...
....
Restarting pod kube-flannel-ds-6htqw
pod "kube-flannel-ds-6htqw" deleted
Restarting pod kube-flannel-ds-fmjjw
pod "kube-flannel-ds-fmjjw" deleted
Restarting pod kube-flannel-ds-j982j
pod "kube-flannel-ds-j982j" deleted
Master node restarted. Complete synchronization between nodes may take a few minutes.

 

Loading

You may also like

Leave a Comment