admin管理员组

文章数量:1642349

文章目录

  • 端口的开放
    • Master node(s)
    • Worker node(s)
  • 开启 Firewalld 的伪装 ip

端口的开放

  以下摘自官方文档:

Master node(s)

ProtocolDirectionPort RangePurposeUsed By
TCPInbound6443*Kubernetes API serverAll
TCPInbound2379-2380etcd server client APIkube-apiserver, etcd
TCPInbound10250Kubelet APISelf, Control plane
TCPInbound10251kube-schedulerSelf
TCPInbound10252kube-controller-managerSelf

Worker node(s)

ProtocolDirectionPort RangePurposeUsed By
TCPInbound10250Kubelet APISelf, Control plane
TCPInbound30000-32767NodePort Services**All

开启 Firewalld 的伪装 ip

  如果不开启此功能,那将无法进行 ip 转发,会导致 DNS 插件不起作用。

$ firewall-cmd --zone=public --add-masquerade --permanent
$ firewall-cmd --reload

本文标签: 需要注意防火墙firewalld