上一篇：openGauss operator实战-环境准备（一）
疑难问题
1）Exiting due tO GUEST MISSING CONNTRACK: Sorry, Kubernetes 1.20.2 requires conntrack to be installed in root’s path
问题现象
# minikube start --driver=none--network-plugin=cni --cni=calico
minikube v1.20.0 on centos 7.6.1810
Using the none driver based on user configuration
Exiting due tO GUEST MISSING CONNTRACK: Sorry, Kubernetes 1.20.2 requires conntrack to be installed in root's path
解决
yum -y install conntrack
2）连不上外网导致拉取相关镜像失败
现象
💢 initialization failed, will try again: wait: /bin/bash -c "sudo env PATH=/var/lib/minikube/binaries/v1.20.2:$PATH kubeadm init --config /var/tmp/minikube/kubeadm.yaml --ignore-preflight-errors=DirAvailable--etc-kubernetes-manifests,DirAvailable--var-lib-minikube,DirAvailable--var-lib-minikube-etcd,FileAvailable--etc-kubernetes-manifests-kube-scheduler.yaml,FileAvailable--etc-kubernetes-manifests-kube-apiserver.yaml,FileAvailable--etc-kubernetes-manifests-kube-controller-manager.yaml,FileAvailable--etc-kubernetes-manifests-etcd.yaml,Port-10250,Swap,Mem": exit status 1
stdout:
[init] Using Kubernetes version: v1.20.2
...
error execution phase preflight: [preflight] Some fatal errors occurred:
[ERROR ImagePull]: failed to pull image k8s.gcr.io/kube-apiserver:v1.20.2: output: Error response from daemon: Get "https://k8s.gcr.io/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
, error: exit status 1
[ERROR ImagePull]: failed to pull image k8s.gcr.io/kube-controller-manager:v1.20.2: output: Error response from daemon: Get "https://k8s.gcr.io/v2/": dial tcp 108.177.125.82:443: i/o timeout
, error: exit status 1
[ERROR ImagePull]: failed to pull image k8s.gcr.io/kube-scheduler:v1.20.2: output: Error response from daemon: Get "https://k8s.gcr.io/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
, error: exit status 1
...
原因
启动时需要拉取镜像，访问外网失败导致
解决方法
手动拉取所需镜像
#1.脚本文件
# cat kubeadm.sh
#!/bin/bash
## 使用如下脚本下载国内镜像，并修改tag为google的tag
set -e
KUBE_VERSION=v1.20.2
KUBE_PAUSE_VERSION=3.2
ETCD_VERSION=3.4.13-0
CORE_DNS_VERSION=1.7.0
GCR_URL=k8s.gcr.io
ALIYUN_URL=registry.aliyuncs.com/google_containers
images=(kube-proxy:${KUBE_VERSION}
kube-scheduler:${KUBE_VERSION}
kube-controller-manager:${KUBE_VERSION}
kube-apiserver:${KUBE_VERSION}
pause:${KUBE_PAUSE_VERSION}
etcd:${ETCD_VERSION}
coredns:${CORE_DNS_VERSION})
for imageName in ${images[@]} ; do
docker pull $ALIYUN_URL/$imageName
docker tag $ALIYUN_URL/$imageName $GCR_URL/$imageName
docker rmi $ALIYUN_URL/$imageName
done
#2.执行
# sh kubeadm.sh
#3.查看镜像
# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
opengauss-5.0.2 latest 11b49a372af4 46 hours ago 2.12GB
openeuler-20.03-lts-sp3 latest 12d0b819f478 2 years ago 189MB
k8s.gcr.io/kube-proxy v1.20.2 43154ddb57a8 3 years ago 118MB
k8s.gcr.io/kube-controller-manager v1.20.2 a27166429d98 3 years ago 116MB
k8s.gcr.io/kube-apiserver v1.20.2 a8c2fdb8bf76 3 years ago 122MB
k8s.gcr.io/kube-scheduler v1.20.2 ed2c44fbdd78 3 years ago 46.4MB
k8s.gcr.io/etcd 3.4.13-0 0369cf4303ff 3 years ago 253MB
k8s.gcr.io/coredns 1.7.0 bfe3a36ebd25 3 years ago 45.2MB
k8s.gcr.io/pause 3.2 80d28bedfe5d 4 years ago 683kB
3）pod不断重启，状态异常：Unable to auto-detect an IPv4 address using interface regexes [eth.*]: no valid host interfaces found
问题现象
# kubectl get pods -l k8s-app=calico-node -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system calico-node-wb2m4 0/1 CrashLoopBackOff 6 9m18s
问题排查
1）查看pod日志
2）查看本地网卡
3）检查calico是否开启自动检测IPV4地址：
问题原因很清楚了，calico会根据默认的eth.*网卡名的匹配规自动检测，找不到相关的网卡，自动分配IP自然也会报错，需要修改calico的IPV4网卡匹配规则
解决办法
- 法一：改网卡名
# 命令修改
kubectl set env daemonset/calico-node -n kube-system IP_AUTODETECTION_METHOD=interface=ens*,eth.*
或者
# 修改配置文件
kubectl edit daemonset calico-node -n kube-system
- 法二：手动指定IP
kubectl set env daemonset/calico-node -n kube-system IP=192.170.3.100/24
再次查看pod状态：
# kubectl get pods -l k8s-app=calico-node -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system calico-node-phwth 0/1 Running 0 13s
# kubectl get pods -l k8s-app=calico-node -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system calico-node-phwth 1/1 Running 0 5m10s
