K8S学习笔记之ETCD启动失败注意事项

 

最近搭建K8S集群遇到ETCD的报错，报错信息如下，一定要关闭防火墙、iptables和SELINUX，三个都要关闭！！

Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer 3de62d4888b330ab could not connect: dial tcp 192.168.26.137:2380: connect: no route to host (prober "ROUND_TRIPPER_SNAPSHOT")
Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer 3de62d4888b330ab could not connect: dial tcp 192.168.26.137:2380: connect: no route to host (prober "ROUND_TRIPPER_RAFT_MESSAGE")
Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer c6f4c021208d2dfe could not connect: dial tcp 192.168.26.136:2380: i/o timeout (prober "ROUND_TRIPPER_SNAPSHOT")
Mar 26 20:39:24 k8s-m1 etcd[6437]: health check for peer c6f4c021208d2dfe could not connect: dial tcp 192.168.26.136:2380: i/o timeout (prober "ROUND_TRIPPER_RAFT_MESSAGE")
Mar 26 20:39:24 k8s-m1 etcd[6437]: publish error: etcdserver: request timed out

 

关闭CentOS7防火墙

# 查看防火墙状态
firewall-cmd --state

# 停止firewall
systemctl stop firewalld.service

# 禁止firewall开机启动
systemctl disable firewalld.service

 

关闭SELINUX

# 编辑SELINUX文件
vim /etc/selinux/config

# 将SELINUX=enforcing改为SELINUX=disabled

 

清除和关闭iptables

# 清空iptables规则
iptables -F

# 保存
iptables-save