Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CoreDNS pod on worker node unable to reach API server on control plane #44

Open
wqld opened this issue Jun 24, 2024 · 1 comment
Open
Assignees

Comments

@wqld
Copy link
Owner

wqld commented Jun 24, 2024

The CoreDNS pod deployed on a worker node cannot reach the Kubernetes API server on the control plane.

  1. CoreDNS attempts to call the API server service (10.96.0.1).
  2. The request is DNAT’d by iptables to 172.18.0.3:6443.
  3. The packet routes from the container’s eth0 to the host’s cni0.
  4. VXLAN encapsulates the packet, but continuous retransmissions occur (172.18.0.3 ? 10.244.1.4 TCP [TCP Retransmission] 6443 ? 40334 [SYN, ACK]).
@wqld wqld self-assigned this Jun 24, 2024
@wqld
Copy link
Owner Author

wqld commented Jun 25, 2024

It needs the ability to handle ClusterIP.
It seems that implementing service communication without relying on kube-proxy might resolve the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant