Kubernetes：物理节点curl正常但Pod内curl失败求助

云上老周

2026-8-1

问题：Pod内发起HTTPS请求出现SSL版本错误

环境信息

Kubernetes集群：1个控制节点 + 4个工作节点
操作系统：Ubuntu 22.04.1
Kubernetes版本：v1.26.1
Calico版本：v3.25.0

问题现象

从Pod向外部服务器发起认证请求时失败，但相同请求在物理节点上执行完全正常。

部署的network-tools配置

apiVersion: apps/v1
kind: Deployment
metadata:
  name: network-tools
  namespace: tools
  labels:
    app: network-tools
spec:
  replicas: 1
  selector:
    matchLabels:
      app: network-tools
  template:
    metadata:
      labels:
        app: network-tools
    spec:
      containers:
      - name: network-tools
        image: praqma/network-multitool

（注：原配置缩进已修正，确保YAML格式合法）

执行的curl命令

curl -k  'https://xxxxxxxxxxx/RequestSessionToken' -H 'Content-Type: application/json' -d '{"Username": "username", "Password": "password", "TokenLifetime": 3600}'

响应对比

物理节点（正常响应）：

{"Token":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx","UserStatusCode":0}

Pod内（异常响应）：

curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number

Pod内curl添加`-vvv`参数的详细输出

*   Trying xx.xx.xx.xx:443...
- Connected to domainname (xx.xx.xx.xx) port 443 (#0)
- ALPN, offering h2
- ALPN, offering http/1.1
- successfully set certificate verify locations:
- CAfile: /etc/ssl/certs/ca-certificates.crt
- CApath: none
- TLSv1.3 (OUT), TLS handshake, Client hello (1):
- error:1408F10B:SSL routines:ssl3_get_record:wrong version number
- Closing connection 0
curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number