时间戳

首页 > 解决方案 > Kubernetes 网络插件

kubernetes - Kubernetes 网络插件

问题描述

我已经使用 calico 网络插件安装了 3 个节点的 Kubernetes 集群。出于某种原因，我决定完全删除 kubernetes 并使用不同的网络插件重新安装它：Flannel。

在我尝试部署我的第一个容器之前，一切似乎都很好。

kubectl describe pod/cassandra返回以下错误：

Unknown desc = [failed to set up sandbox container "957f68c3cbe9b230b0e2bd6729a12c340f903de568622e28e335f7b48563a445" network for pod "cassandra-d7db46b86-dz7ck": networkPlugin cni failed to set up pod "cassandra-d7db46b86-dz7ck_default" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes"), failed to clean up sandbox container "957f68c3cbe9b230b0e2bd6729a12c340f903de568622e28e335f7b48563a445" network for pod "cassandra-d7db46b86-dz7ck": networkPlugin cni failed to teardown pod "cassandra-d7db46b86-dz7ck_default" network: error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")]
  Normal   SandboxChanged          3s (x3 over 18s)  kubelet, <node name>  Pod sandbox changed, it will be killed and re-created.

通过阅读错误，Kubernetes 似乎仍在使用 calico 插件，尽管我删除了它并安装了 Flannel 插件。

我怎样才能清理这个烂摊子？

标签： kuberneteskubernetes-networking

解决方案

  1. 清除ip route：ip route flush proto bird
  2. 删除所有节点中的所有印花布链接
ip link list | grep cali | awk '{print $2}' | cut -c 1-15 | xargs -I {} ip link delete {}
  1. 删除 ipip 模块 modprobe -r ipip
  2. 删除印花布配置
rm /etc/cni/net.d/10-calico.conflist && rm /etc/cni/net.d/calico-kubeconfig
  1. 重启 kubelet 服务

在此之后，您安装法兰绒。

推荐阅读