本地Mac通过kubectl无法连接OCI虚拟机上的Microk8s集群

虚拟机信息 #

shape："VM.Standard.A1.Flex"
CPU：2核
内存：8GB

操作系统信息 #

NAME="Ubuntu"
VERSION="20.04.6 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.6 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal

网络配置 #

cidr = 0.0.0.0/0
ports    = [
        "22",
        "80",
        "443",
        "6443",
        "2379",
        "2380",
        "8080",
        "10248",
        "10250",
        "10251",
        "10252",
        "16443",
        "30000-32767"
]

连接配置 #

kubeconfig #

已将以下内容粘贴到本地Mac的$HOME/.kube/config文件中：

- cluster:
    certificate-authority-data: XXXXXXXX.........
    server: https://<VM公网IP>:16443
  name: microk8s-cluster
contexts:
- context:
    cluster: microk8s-cluster
    user: admin
  name: microk8s
current-context: microk8s
kind: Config
preferences: {}
users:
- name: admin
  user:
    token: XXXXXXXXXXXX.......

端口监听状态 #

root@masternode:~# ss -ant
State                Recv-Q            Send-Q                            Local Address:Port                               Peer Address:Port            Process            
LISTEN               0                 4096                                  127.0.0.1:10248                                   0.0.0.0:*                                  
LISTEN               0                 4096                                  127.0.0.1:10249                                    
~~
LISTEN               0                 128                                        [::]:22                                         [::]:*                                  
LISTEN               0                 4096                                          *:16443                                         *:*                                  
ESTAB                0                 0                                         [::1]:16443                                     [::1]:33314                               
ESTAB                0                 0                            [::ffff:10.0.0.57]:16443                       [::ffff:10.1.181.1]:50704                               
ESTAB                0                 0                            [::ffff:10.0.0.57]:16443                        [::ffff:10.0.0.57]:13131                               
ESTAB                0                 0                                         [::1]:33314                                     [::1]:16443                               
ESTAB                0                 0                            [::ffff:127.0.0.1]:16443                        [::ffff:127.0.0.1]:34826                               
ESTAB                0                 0                            [::ffff:10.0.0.57]:16443                        [::ffff:10.0.0.57]:62508                               
ESTAB                0                 0                            [::ffff:127.0.0.1]:16443                        [::ffff:127.0.0.1]:53818                               
ESTAB                0                 0                            [::ffff:10.0.0.57]:16443                        [::ffff:10.0.0.57]:62920                               

Microk8s状态 #

Microk8s运行状态 #

root@masternode:~# microk8s status
microk8s is running
high-availability: no
  datastore master nodes: 127.0.0.1:19001
  datastore standby nodes: none
addons:
  enabled:
    ha-cluster           # (core) 配置当前节点的高可用
~~
    registry             # (core) 本地私有镜像仓库，暴露在localhost:32000
    storage              # (core) hostpath-storage插件的别名，已废弃

节点状态 #

root@masternode:~# microk8s kubectl get nodes
NAME         STATUS   ROLES    AGE   VERSION
masternode   Ready    <none>   40m   v1.26.4

错误信息 #

takeruyamamura@TakerunoMini .kube % kubectl get nodes
E0429 04:18:58.717595   31573 memcache.go:238] couldn't get current server API group list: Get "https://168.138.89.20:16443/api?timeout=32s": dial tcp <公网IP>:16443: connect: connection refused
...

已尝试操作 #

• 重启虚拟机
• 卸载并重新安装Microk8s

预期结果 #

• 本地Mac通过kubectl命令能够正常连接到Microk8s集群

内容的提问来源于stack exchange，提问作者山村武