kubenetes dns

E0228 07:32:28.912833       1 reflector.go:201] k8s.io/dns/pkg/dns/dns.go:147: Failed to list *v1.Endpoints: Get https://10.0.0.1:443/api/v1/endpoints?resourceVersion=0: x509: certificate is valid for 10.254.0.1, 109.105.4.65, not 10.0.0.1

在生成证书的 master_ssl.cnf

指定的 IP.1 = 10.254.0.1

etcdctl -C http://localhost:4001 set /coreos.com/network/config '{"Network":"10.254.0.0/16"}'

重起 flanneld

# etcdctl -C http://109.105.30.132:4001 ls /coreos.com/network/subnets

/coreos.com/network/subnets/10.254.20.0-24

/coreos.com/network/subnets/10.254.50.0-24

/coreos.com/network/subnets/10.254.43.0-24

/coreos.com/network/subnets/10.254.67.0-24

nohup flanneld -etcd-endpoints=http://109.105.30.132:4001 > flanneld.log 2>&1 &

api server 启动参数 --service-cluster-ip-range=10.254.0.0/16

========================================================

kubelet 启动参数增加 --cluster-dns=10.254.0.100 --cluster-domain=cluster.local

测试 创建busybox pod

kubectl exec busybox -- nslookup svc

////////////////////////////////////////////////////////////////////////

修改docker0 网桥的地址

./mk-docker-opts.sh -i                 （flannel 解压包里）

source /run/flannel/subnet.env

ifconfig docker0 $FLANNEL_SUBNET

systemctl restart docker

----------------------------------------------------

如果不行

centos7:

vi /usr/lib/systemd/system/docker.service

启动参数加上 --bip=${FLANNEL_SUBNET}

vi /etc/systemd/system/docker.service.d/env.conf

[Service] Environment="HTTP_PROXY=http://109.105.4.17:8119" "HTTPS_PROXY=http://109.105.4.17:8119" "NO_PROXY=localhost,127.0.0.1,registry.cn-hangzhou.aliyuncs.com,docker.io,registry.bst-1.cns.bstjpc.com" "FLANNEL_SUBNET=10.254.39.1/24"

systemctl daemon-reload

systemctl restart docker

-------------------------------------------------------------

ubuntu14:

vi /etc/default/docker

DOCKER_OPTS="--bip=10.254.61.1/24"

service docker restart

-------------------------------

ubuntu16:

vi /etc/systemd/system/docker.service.d/docker.conf
[service]
Environment="FLANNEL_SUBNET=10.254.43.1/24"

/lib/systemd/system