k8s node节点的calico报错:
Liveness probe failed: Get http://localhost:9099/liveness: dial tcp [::1]:9099: connect: connection refused
日志如下:
bird: Mesh_192_168_2_61: State changed to start
Threshold time for bird readiness check: 30s
2020-11-19 05:59:37.686 [FATAL][4040] int_dataplane.go 824: Kernel’s RPF check is set to ‘loose’. This would allow endpoints to spoof their IP address. Calico requires net.ipv4.conf.all.rp_filter to be set to 0 or 1. If you require loose RPF and you are not concerned about spoofing, this check can be disabled by setting the IgnoreLooseRPF configuration parameter to ‘true’.
解决:
kubectl -n kube-system set env daemonset/calico-node FELIX_IGNORELOOSERPF=true
参考:https://github.com/kubernetes-sigs/kind/issues/891
0 Comments