FAQ
namespace
namespace 处于 Terminating 修复
NAMESPACE_NAME="abc-ns"
kubectl get ns $NAMESPACE_NAME -o json > $NAMESPACE_NAME.json
修改 $NAMESPACE_NAME.json
"spec": {
"finalizers": [
"kubernetes"
]
},
更改为:
"spec": {
},
API代理
# kubectl proxy --port=8081
Starting to serve on 127.0.0.1:8081
curl -k -H "Content-Type:application/json" -X PUT --data-binary @$NAMESPACE_NAME.json http://127.0.0.1:8081/api/v1/namespaces/$NAMESPACE_NAME/finalize
kubelet
Failed to get system container stats
Mar 12 09:37:12 [localhost] kubelet[1725]: E0312 09:37:12.570955 1725 summary_sys_containers.go:47] Failed to get system container stats for "/system.slice/docker.service": failed to get cgroup stats for "/system.slice/docker.service": failed to get container info for "/system.slice/docker.service": unknown container "/system.slice/docker.service"
编辑/etc/systemd/system/kubelet.service
文件,添加:
[Service]
CPUAccounting=true
MemoryAccounting=true
systemctl daemon-reload
systemctl restart kubelet
Pod 无法通过 Service IP 连接到它本身
如果 Service 的末端尝试访问自己的 Service VIP,则该端点可以把流量负载均衡回来到它们自身。 hairpin-mode(发夹模式) 标志必须被设置为 hairpin-veth 或者 promiscuous-bridge。
若为 hairpin-veth 模式,通过如下方式检测:
$ cat /sys/devices/virtual/net/cni0/brif/veth80c6661f/hairpin_mode
1
若为 promiscuous-bridge 模式,通过如下方式检测:
ip a show cni0 | grep PROMISC