20210708_kubernetes.default集群默认服务不可用问题处理

 1[root@centos-deployment-6c4fc8fcc-7l86j /]# curl  -k https://10.254.0.1:443
 2curl: (7) Failed connect to 10.254.0.1:443; Connection refused
 3
 4[root@centos-deployment-6c4fc8fcc-7l86j /]# curl  -k https://10.254.0.1:443
 5{
 6  "kind": "Status",
 7  "apiVersion": "v1",
 8  "metadata": {
 9
10  },
11  "status": "Failure",
12  "message": "forbidden: User \"system:anonymous\" cannot get path \"/\"",
13  "reason": "Forbidden",
14  "details": {
15
16  },
17  "code": 403

1[root@hz-k8s-master-199-152-51 ~]# kubectl get ep kubernetes
2NAME                                                     ENDPOINTS                                               AGE
3kubernetes                                               10.199.152.51:443,10.199.152.52:443,10.199.152.53:443   630d

1--apiserver-count int     默认值：1
2集群中运行的 API 服务器数量，必须为正数。 （在启用 --endpoint-reconciler-type=master-count 时使用。）

 1/*
 2Copyright 2017 The Kubernetes Authors.
 3Licensed under the Apache License, Version 2.0 (the "License");
 4you may not use this file except in compliance with the License.
 5You may obtain a copy of the License at
 6    http://www.apache.org/licenses/LICENSE-2.0
 7Unless required by applicable law or agreed to in writing, software
 8distributed under the License is distributed on an "AS IS" BASIS,
 9WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
10See the License for the specific language governing permissions and
11limitations under the License.
12*/
13
14// Package reconcilers Endpoint Reconcilers for the apiserver
15package reconcilers
16
17import (
18	"net"
19
20	corev1 "k8s.io/api/core/v1"
21)
22
23// EndpointReconciler knows how to reconcile the endpoints for the apiserver service.
24type EndpointReconciler interface {
25	// ReconcileEndpoints sets the endpoints for the given apiserver service (ro or rw).
26	// ReconcileEndpoints expects that the endpoints objects it manages will all be
27	// managed only by ReconcileEndpoints; therefore, to understand this, you need only
28	// understand the requirements.
29	//
30	// Requirements:
31	//  * All apiservers MUST use the same ports for their {rw, ro} services.
32	//  * All apiservers MUST use ReconcileEndpoints and only ReconcileEndpoints to manage the
33	//      endpoints for their {rw, ro} services.
34	//  * ReconcileEndpoints is called periodically from all apiservers.
35	ReconcileEndpoints(serviceName string, ip net.IP, endpointPorts []corev1.EndpointPort, reconcilePorts bool) error
36	// RemoveEndpoints removes this apiserver's lease.
37	RemoveEndpoints(serviceName string, ip net.IP, endpointPorts []corev1.EndpointPort) error
38	// StopReconciling turns any later ReconcileEndpoints call into a noop.
39	StopReconciling()
40}
41
42// Type the reconciler type
43type Type string
44
45const (
46	// MasterCountReconcilerType will select the original reconciler
47	MasterCountReconcilerType Type = "master-count"
48	// LeaseEndpointReconcilerType will select a storage based reconciler
49	LeaseEndpointReconcilerType = "lease"
50	// NoneEndpointReconcilerType will turn off the endpoint reconciler
51	NoneEndpointReconcilerType = "none"
52)
53
54// Types an array of reconciler types
55type Types []Type
56
57// AllTypes export all reconcilers
58var AllTypes = Types{
59	MasterCountReconcilerType,
60	LeaseEndpointReconcilerType,
61	NoneEndpointReconcilerType,
62}
63
64// Names returns a slice of all the reconciler names
65func (t Types) Names() []string {
66	strs := make([]string, len(t))
67	for i, v := range t {
68		strs[i] = string(v)
69	}
70	return strs
71}