2016-04-23 33 views
1

我正在为此kDB模板设置skydns http://kubernetes.io/docs/getting-started-guides/docker-multinode/skydns.yaml.in。但它不能解决DNS。在查找解决方案后,还在kube2sky参数中添加了-kube_master_url,但仍然是同样的问题。这里是skydns日志:skydns无法解析kubernetes集群中的dns

2016/04/23 02:49:26 skydns: falling back to default configuration, could not read from etcd: 501: All the given peers are not reachable (failed to propose on members [http://127.0.0.1:4001] twice [last error: Get http://127.0.0.1:4001/v2/keys/skydns/config?quorum=false&recursive=false&sorted=false: dial tcp 127.0.0.1:4001: connection refused]) [0] 
2016/04/23 02:49:26 skydns: ready for queries on cluster.local. for tcp://0.0.0.0:53 [rcache 0] 
2016/04/23 02:49:26 skydns: ready for queries on cluster.local. for udp://0.0.0.0:53 [rcache 0] 
2016/04/23 02:49:33 skydns: error from backend: 501: All the given peers are not reachable (failed to propose on members [http://127.0.0.1:4001] twice [last error: Get http://127.0.0.1:4001/v2/keys/skydns/local/cluster/svc/default/kubernetes?quorum=false&recursive=true&sorted=false: dial tcp 127.0.0.1:4001: connection refused]) [0] 

任何指针? Kube2sky日志:

I0423 02:49:39.286489  1 kube2sky.go:436] Etcd server found: http://127.0.0.1:4001 
I0423 02:49:40.295909  1 kube2sky.go:503] Using http://172.17.0.1:8080 for kubernetes master 
I0423 02:49:40.296183  1 kube2sky.go:504] Using kubernetes API v1 
+0

该问题似乎与TLS证书有关。在kube2sky日志中获得这个:'x509:由未知权威签名的证书。在重试之前睡1秒 – devd

回答

1

我有一些iptables规则设置哪些是阻挡docker0界面,kub​​ernetes服务,包括skydns正在运行的连接。冲洗它的规则后,它的工作。因此,看起来第一个问题是我的本地设置而不是skydns。

然而问题安装本地搬运工注册表后,又出现了,我得到这个错误:

I0427 20:30:45.183419 1 kube2sky.go:627] Ignoring error while waiting for service default/kubernetes: Get https://10.0.0.1:443/api/v1/namespaces/default/services/kubernetes: x509: certificate signed by unknown authority. Sleeping 1s before retrying. 

作为一种变通方法我删除了使用kubectl delete secrets/default-token-q4siz然后重新skydns秘密,它开始再次合作。