K8S學習筆記之ETCD啓動失敗注意事項

 

最近搭建K8S集羣遇到ETCD的報錯，報錯信息以下，必定要關閉防火牆、iptables和SELINUX，三個都要關閉！！

Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer 3de62d4888b330ab could not connect: dial tcp 192.168.26.137:2380: connect: no route to host (prober "ROUND_TRIPPER_SNAPSHOT") Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer 3de62d4888b330ab could not connect: dial tcp 192.168.26.137:2380: connect: no route to host (prober "ROUND_TRIPPER_RAFT_MESSAGE") Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer c6f4c021208d2dfe could not connect: dial tcp 192.168.26.136:2380: i/o timeout (prober "ROUND_TRIPPER_SNAPSHOT") Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer c6f4c021208d2dfe could not connect: dial tcp 192.168.26.136:2380: i/o timeout (prober "ROUND_TRIPPER_RAFT_MESSAGE") Mar 26 20:39:24 k8s-m1 etcd[6437]: publish error: etcdserver: request timed out

 

關閉CentOS7防火牆

# 查看防火牆狀態
firewall-cmd --state

# 中止firewall
systemctl stop firewalld.service

# 禁止firewall開機啓動
systemctl disable firewalld.service

 

關閉SELINUX

# 編輯SELINUX文件
vim /etc/selinux/config

# 將SELINUX=enforcing改成SELINUX=disabled

 

清除和關閉iptables

# 清空iptables規則
iptables -F

# 保存
iptables-save