天蓝色的纤毛簇网

Question

我正在使用 Aks 引擎部署集群网格。我在两个不同的集群上安装了 cilium。按照 clustermesh 安装指南，一切看起来都是正确的。列出了节点，状态正确并且 etcd-operator 日志中没有出现错误。但是，我无法访问外部端点。示例应用程序始终从当前集群应答。

按照故障排除指南，我在代理的调试信息中发现没有声明任何外部端点。集群有一个主节点和两个从节点。我附上了两个集群的节点列表和状态。如果需要，我可以提供额外的日志。

如有任何帮助，我们将不胜感激。

集群 1

    kubectl -nkube-system exec -it cilium-vg8sm cilium node list
    Name IPv4 Address Endpoint CIDR IPv6 Address Endpoint CIDR
    cluster1/k8s-cilium2-29734124-0 172.18.2.5 192.168.1.0/24
    cluster1/k8s-cilium2-29734124-1 172.18.2.4 10.4.0.0/16
    cluster1/k8s-master-29734124-0 172.18.1.239 10.239.0.0/16
    cluster2/k8s-cilium2-14610979-0 172.18.2.6 192.168.2.0/24
    cluster2/k8s-cilium2-14610979-1 172.18.2.7 10.7.0.0/16
    cluster2/k8s-master-14610979-0 172.18.2.239 10.239.0.0/16

    kubectl -nkube-system exec -it cilium-vg8sm cilium status
    KVStore: Ok etcd: 1/1 connected: https://cilium-etcd-client.kube-system.svc:2379 - 3.3.11
    ContainerRuntime: Ok docker daemon: OK
    Kubernetes: Ok 1.15 (v1.15.1) [linux/amd64]
    Kubernetes APIs: ["CustomResourceDefinition", "cilium/v2::CiliumNetworkPolicy", "core/v1::Endpoint", "core/v1::Namespace", "core/v1::Node", "core/v1::Pods", "core/v1::Service", "networking.k8s.io/v1::NetworkPolicy"]
    Cilium: Ok OK
    NodeMonitor: Disabled
    Cilium health daemon: Ok
    IPv4 address pool: 10/65535 allocated from 10.4.0.0/16
    Controller Status: 48/48 healthy
    Proxy Status: OK, ip 10.4.0.1, port-range 10000-20000
    Cluster health: 6/6 reachable (2019-08-09T10:11:22Z)

集群 2

    kubectl -nkube-system exec -it cilium-rl8gt cilium node list
    Name IPv4 Address Endpoint CIDR IPv6 Address Endpoint CIDR
    cluster1/k8s-cilium2-29734124-0 172.18.2.5 192.168.1.0/24
    cluster1/k8s-cilium2-29734124-1 172.18.2.4 10.4.0.0/16
    cluster1/k8s-master-29734124-0 172.18.1.239 10.239.0.0/16
    cluster2/k8s-cilium2-14610979-0 172.18.2.6 192.168.2.0/24
    cluster2/k8s-cilium2-14610979-1 172.18.2.7 10.7.0.0/16
    cluster2/k8s-master-14610979-0 172.18.2.239 10.239.0.0/16

    kubectl -nkube-system exec -it cilium-rl8gt cilium status
    KVStore: Ok etcd: 1/1 connected: https://cilium-etcd-client.kube-system.svc:2379 - 3.3.11
    ContainerRuntime: Ok docker daemon: OK
    Kubernetes: Ok 1.15 (v1.15.1) [linux/amd64]
    Kubernetes APIs: ["CustomResourceDefinition", "cilium/v2::CiliumNetworkPolicy", "core/v1::Endpoint", "core/v1::Namespace", "core/v1::Node", "core/v1::Pods", "core/v1::Service", "networking.k8s.io/v1::NetworkPolicy"]
    Cilium: Ok OK
    NodeMonitor: Disabled
    Cilium health daemon: Ok
    IPv4 address pool: 10/65535 allocated from 10.7.0.0/16
    Controller Status: 48/48 healthy
    Proxy Status: OK, ip 10.7.0.1, port-range 10000-20000
    Cluster health: 6/6 reachable (2019-08-09T10:40:39Z)

Answer 1

此问题已在 https://github.com/cilium/cilium/issues/8849 中修复，并将在 1.6 版中提供。

天蓝色的纤毛簇网

Cilium clustermesh with azure

azure

kubernetes

cilium