远程无法访问nodeport映射的端口
ybhzf 2017-05-25 05:22:13 环境:
Kubernetes version: v1.6.3
Authorization mode: RBAC
centos 7
docker version
Client:
Version: 17.05.0-ce
API version: 1.29
Go version: go1.7.5
Git commit: 89658be
Built: Thu May 4 22:06:25 2017
OS/Arch: linux/amd64
Server:
Version: 17.05.0-ce
API version: 1.29 (minimum version 1.12)
Go version: go1.7.5
Git commit: 89658be
Built: Thu May 4 22:06:25 2017
OS/Arch: linux/amd64
Experimental: false
----------------------------------------------------
已经关闭宿主机防火墙
宿主机可以访问容器中的tomcat程序,远程机器无法访问。
相关PODS
NAME READY STATUS RESTARTS AGE
mysql-685o8 1/1 Running 1 6h
myweb-4mfaz 1/1 Running 1 6h
myweb-wc15g 1/1 Running 1 6h
------------------------------------------------------------------
kubectl get rc
NAME DESIRED CURRENT READY AGE
mysql 1 1 1 7h
myweb 2 2 2 6h
------------------------------------------------------------------------
kubectl get svc
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes 169.169.0.1 <none> 443/TCP 10d
mysql 169.169.127.36 <none> 3306/TCP 2d
myweb 169.169.121.15 <nodes> 8080/TCP 6h
-----------------------------------------------------------------------------
kubectl get endpoints
NAME ENDPOINTS AGE
kubernetes 10.1.54.128:6443 10d
mysql 172.17.0.4:3306 2d
myweb 172.17.0.2:8080,172.17.0.3:8080 6h
--------------------------------------------------------------------------------
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default bogon 0.0.0.0 UG 100 0 0 ens160
10.1.54.0 0.0.0.0 255.255.255.0 U 100 0 0 ens160
172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0
172.31.0.0 0.0.0.0 255.255.0.0 U 0 0 0 flannel.1
------------------------------------------------------------------------------------
相关yaml文件
apiVersion: v1
kind: ReplicationController
metadata:
name: myweb
spec:
replicas: 2
selector:
app: myweb
template:
metadata:
labels:
app: myweb
spec:
containers:
- name: myweb
image: kubeguide/tomcat-app:v1
ports:
- containerPort: 8080
env:
- name: MYSQL_SERVICE_HOST
value: 'mysql'
- name: MYSQL_SERVICE_PORT
value: '3306'
---------------------------------------------------------------------------
apiVersion: v1
kind: Service
metadata:
name: myweb
spec:
type: NodePort
ports:
- port: 8080
nodePort: 30001
selector:
app: myweb