gifted-cricket-25537
05/19/2022, 10:54 AMcni: "calico"
disable-kube-proxy: true
and since there's no kube-proxy
installed the tigera-operator
can't reach the API
2022/05/19 07:50:02 [ERROR] Get "<https://10.43.0.1:443/api?timeout=32s>": dial tcp 10.43.0.1:443: i/o timeout
I know that I could override it using the kubernetes-services-endpoint
CM, although I can't inject that during the installation. Any clues?kind: ConfigMap
apiVersion: v1
metadata:
name: kubernetes-services-endpoint
namespace: tigera-operator
data:
KUBERNETES_SERVICE_HOST: "127.0.0.1"
KUBERNETES_SERVICE_PORT: "6443"
to /var/lib/rancher/rke2/server/manifests
k -n calico-system logs calico-kube-controllers-64bfc95dc8-4t7qf
2022-05-19 11:38:10.602 [INFO][1] main.go 94: Loaded configuration from environment config=&config.Config{LogLevel:"info", WorkloadEndpointWorkers:1, ProfileWorkers:1, PolicyWorkers:1, NodeWorkers:1, Kubeconfig:"", DatastoreType:"kubernetes"}
W0519 11:38:10.607051 1 client_config.go:615] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work.
2022-05-19 11:38:10.609 [INFO][1] main.go 115: Ensuring Calico datastore is initialized
2022-05-19 11:38:10.613 [ERROR][1] client.go 272: Error getting cluster information config ClusterInformation="default" error=Get "<https://127.0.0.1:6443/apis/crd.projectcalico.org/v1/clusterinformations/default>": dial tcp 127.0.0.1:6443: connect: connection refused
2022-05-19 11:38:10.613 [FATAL][1] main.go 120: Failed to initialize Calico datastore error=Get "<https://127.0.0.1:6443/apis/crd.projectcalico.org/v1/clusterinformations/default>": dial tcp 127.0.0.1:6443: connect: connection refused
but install went throughtigera-operator
is running with hostNetwork: true
it obviously went through, talking to the local API server, but calico-kube-controllers
is a normal podkubernetes
svc, which is available once tigera was able to configure eBPFstatus.hostIP
😞victorious-analyst-3332
05/19/2022, 1:15 PMkubernetes-services-endpoint
KUBERNETES_SERVICE_HOST
# kubectl get endpoints -n default kubernetes -o jsonpath='{.subsets[0].addresses[0].ip}'
10.10.10.10
gifted-cricket-25537
05/19/2022, 1:24 PMbpfKubeProxyIptablesCleanupEnabled
to felix config right?victorious-analyst-3332
05/19/2022, 1:24 PMgifted-cricket-25537
05/19/2022, 1:25 PMvictorious-analyst-3332
05/19/2022, 1:25 PMgifted-cricket-25537
05/19/2022, 1:25 PMbpfKubeProxyIptablesCleanupEnabled
will be removedvictorious-analyst-3332
05/19/2022, 3:19 PMfelixConfiguration
? apologies, we’re still deploying calico outside of RKE2gifted-cricket-25537
05/19/2022, 3:20 PMvictorious-analyst-3332
05/19/2022, 3:21 PMgifted-cricket-25537
05/19/2022, 3:22 PM