Seems like I’ve issue where. i checked configmap coredns and see it’s forward dns to /etc/resolv.conf. But i don’t have idea to fix, because my nodes is visual machine. I’ve fix hostname in file hosts, but issue not resolved yet.
Containers don’t use the host’s /etc/hosts file. Each container has it’s own nsswitch configuration. You could probably do something like this.
I’m a bit biased here though. If you need to connect to a node to do something on a node, you can just do it directly in a pod.
To illustrate how to do it, you might want to check out the krew plugin called node-shell.
All node-shell does is creates a pod that runs on the node that you want to do work on and attaches you to it. At that point if you’re thinking you needed to connect to a service, it’s now always going to be localhost.
@akala515 - I found that my CNI was using iptables-legacy even though my debian 10 VMs were set to use nt_tables. This was causing my rules for 10.96 to be applied to iptables-legacy and iptables-legacy -t nat for CNI and causing this breakage.
Resolution for me was to start over, remove all iptables for both legacy and nft, and start from scratch.
kubeadm init…
Followed by, instead of an install of calico directly from one of their manifest, you should pull it down and add
- name: FELIX_IPTABLESBACKEND
value: “NFT”
to the env vars. This will force NFT. After then installing calico from this updated version of it, it all worked for me and I had no iptables-legacy changes and everything lived in nft.
