prehistoric-solstice-99854
09/15/2022, 8:58 PMkubectl
. However, when I tried to access Rancher, after a successful install, the site never fully loads. I looked through logs and have determined that DNS isn’t working and that is causing the problem. I got a shell inside a container and confirmed that I can ping an IP but not a domain name.
I’ve disabled firewalld, temporarily disabled SELinux, and I updated NetworkManager to ignore CNI traffic on all RKE2 nodes. The 3 management nodes and 3 worker nodes have no DNS issues, just the pods that do. I’m not sure what to try next. It appears the issue is communication between pods. Could anyone point me in the right direction on this? I’ve looked for generic coredns troubleshooting and nothing has helped me find the problem yet.creamy-pencil-82913
09/15/2022, 9:05 PMprehistoric-solstice-99854
09/15/2022, 9:07 PMkubectl logs -f …
and tried to do some DNS requests and I don’t see any traffic. At this point, it doesn’t even look like the request hits the nodes.creamy-pencil-82913
09/15/2022, 9:08 PMprehistoric-solstice-99854
09/15/2022, 9:08 PMhost <http://updates.suse.com|updates.suse.com>
fails but host <http://updates.suse.com|updates.suse.com> 1.1.1.1
works.nslookup kubernetes.default.svc
?creamy-pencil-82913
09/15/2022, 9:09 PMkubernetes.default.svc.cluster.local.
if you want to try a FQDN, without depending on search behaviorprehistoric-solstice-99854
09/15/2022, 9:10 PM# dig kubernetes.default.svc
; <<>> DiG 9.9.5-9+deb8u19-Debian <<>> kubernetes.default.svc
;; global options: +cmd
;; connection timed out; no servers could be reached
creamy-pencil-82913
09/15/2022, 9:11 PMprehistoric-solstice-99854
09/15/2022, 9:13 PMcreamy-pencil-82913
09/15/2022, 9:45 PMprehistoric-solstice-99854
09/15/2022, 9:47 PMcreamy-pencil-82913
09/15/2022, 9:49 PMprehistoric-solstice-99854
09/15/2022, 9:49 PMcreamy-pencil-82913
09/15/2022, 9:50 PMcalico.vethuMTU
valueprehistoric-solstice-99854
09/15/2022, 9:52 PMlittle-actor-95014
09/16/2022, 3:22 PMsudo ethtool -K flannel.1 tx-checksum-ip-generic off
I've personally only ever seen this issue with Ubuntu, but it's a stab in the dark if nothing else helpsprehistoric-solstice-99854
09/16/2022, 3:28 PMlittle-actor-95014
09/16/2022, 3:39 PMprehistoric-solstice-99854
09/16/2022, 3:44 PMlittle-actor-95014
09/16/2022, 3:47 PMprehistoric-solstice-99854
09/16/2022, 3:48 PM