RHEL9 Minimal部署Kubernetes 1.27集群Pod连接故障求助

环境概况 #

• 节点配置：4台RHEL9 Minimal虚拟机（1台控制节点、3台工作节点）
• 部署方式：通过Helm Chart部署Kubernetes 1.27集群
• 异常表现：集群部署完成后，所有Pod因连接问题陷入崩溃循环，Redis无法完成初始化；相同部署配置在RHEL7、RHEL8虚拟机上可正常运行

错误日志 #

Redis 6.2.12错误信息 #

Initializing config..
/readonly-config/init.sh: line 84: Could not resolve the announce ip for this pod: not found

Error from server (BadRequest): container "sentinel" in pod "xio-redis-ha-server-0" is waiting to start: PodInitializing

*** FATAL CONFIG FILE ERROR (Redis 6.2.12) ***
Reading the configuration file, at line 2
>>> 'sentinel down-after-milliseconds mymaster 10000'
No such master with specified name.

其他Pod通用连接错误 #

Caused by: java.util.concurrent.CompletionException: io.netty.channel.AbstractChannel$AnnotatedNoRouteToHostException: No route to host: name-redis-ha.default.svc.cluster.local/10.42.0.22:6379
Caused by: io.netty.channel.AbstractChannel$AnnotatedConnectException: Connection refused: name-redis-ha.default.svc.cluster.local/10.42.2.27:6379
Caused by: java.net.ConnectException: Connection refused
Caused by: org.redisson.client.RedisConnectionException: Unable to connect to Redis server: name-redis-ha.default.svc.cluster.local/10.42.2.27:6379

已尝试的排查操作 #

• 开放节点所有端口
• 重启服务器、Docker服务
• 重启firewalld后，Pod内curl服务恢复正常，但Pod间仍无法建立连接
• 修改firewalld.conf中的iptablesBackend选项，尝试避免防火墙接口冲突
• 配置集群Canal Pod自动检测防火墙后端

内容的提问来源于stack exchange，提问作者stroppycow