Rancher2.6.3导入阿里云k8s集群失败

Rancher Server 设置

  • Rancher 版本:rancher2.6.3
  • 安装选项 (Docker install)

下游集群信息

  • Kubernetes 版本: v1.18.8-aliyun.1
  • Cluster Type (Local/Downstream): 阿里云ack托管集群
    docker version :docker://19.3.5

用户信息

  • 登录用户的角色是什么? (管理员/集群所有者/集群成员/项目所有者/项目成员/自定义):管理员

主机操作系统:
内核版本 : 3.10.0-1062.18.1.el7.x86_64

问题描述:
无法连接到rancher server 10.1.90.3为rancher server地址
ERROR: https://10.1.90.3/ping is not accessible (Failed to connect to 10.1.90.3 port 443: Connection timed out)

重现步骤:

结果:

预期结果:

截图:

其他上下文信息:

日志
kubectl logs cattle-cluster-agent-5bd59f9cbc-tkpfj -n cattle-system 
INFO: Environment: CATTLE_ADDRESS=192.168.44.159 CATTLE_CA_CHECKSUM=ec22e930baa2dce02a9a1d9c9c3a359a51564fbe49052f2d2299f8e4ba4dada5 CATTLE_CLUSTER=true CATTLE_CLUSTER_AGENT_PORT=tcp://172.23.5.97:80 CATTLE_CLUSTER_AGENT_PORT_443_TCP=tcp://172.23.5.97:443 CATTLE_CLUSTER_AGENT_PORT_443_TCP_ADDR=172.23.5.97 CATTLE_CLUSTER_AGENT_PORT_443_TCP_PORT=443 CATTLE_CLUSTER_AGENT_PORT_443_TCP_PROTO=tcp CATTLE_CLUSTER_AGENT_PORT_80_TCP=tcp://172.23.5.97:80 CATTLE_CLUSTER_AGENT_PORT_80_TCP_ADDR=172.23.5.97 CATTLE_CLUSTER_AGENT_PORT_80_TCP_PORT=80 CATTLE_CLUSTER_AGENT_PORT_80_TCP_PROTO=tcp CATTLE_CLUSTER_AGENT_SERVICE_HOST=172.23.5.97 CATTLE_CLUSTER_AGENT_SERVICE_PORT=80 CATTLE_CLUSTER_AGENT_SERVICE_PORT_HTTP=80 CATTLE_CLUSTER_AGENT_SERVICE_PORT_HTTPS_INTERNAL=443 CATTLE_CLUSTER_REGISTRY= CATTLE_INGRESS_IP_DOMAIN=sslip.io CATTLE_INSTALL_UUID=426db8af-5b0c-42b9-8b4c-2c0d11aa14c1 CATTLE_INTERNAL_ADDRESS= CATTLE_IS_RKE=false CATTLE_K8S_MANAGED=true CATTLE_NODE_NAME=cattle-cluster-agent-5bd59f9cbc-tkpfj CATTLE_SERVER=https://10.1.90.3 CATTLE_SERVER_VERSION=v2.6.3
INFO: Using resolv.conf: nameserver 172.23.0.10 search cattle-system.svc.cluster.local svc.cluster.local cluster.local options ndots:5
ERROR: https://10.1.90.3/ping is not accessible (Failed to connect to 10.1.90.3 port 443: Connection timed out)

日志还是很清晰的,你需要让ACK的Pod网络可以访问到rancher-server。

cattle-cluster-agent agent 无法访问该地址,需要做映射