k8s node节点的calico报错:

Liveness probe failed: Get http://localhost:9099/liveness: dial tcp [::1]:9099: connect: connection refused

日志如下:

bird: Mesh_192_168_2_61: State changed to start
Threshold time for bird readiness check: 30s
2020-11-19 05:59:37.686 [FATAL][4040] int_dataplane.go 824: Kernel’s RPF check is set to ‘loose’. This would allow endpoints to spoof their IP address. Calico requires net.ipv4.conf.all.rp_filter to be set to 0 or 1. If you require loose RPF and you are not concerned about spoofing, this check can be disabled by setting the IgnoreLooseRPF configuration parameter to ‘true’.

解决:

kubectl -n kube-system set env daemonset/calico-node FELIX_IGNORELOOSERPF=true

 

参考:https://github.com/kubernetes-sigs/kind/issues/891

Categories: KUBERNETES

0 Comments

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *