apiserver前面如果有lvs做高可用,lvs对apiserver做健康检测要注意不能使用tcp check,否则会触发报错
I0602 06:16:23.897813 1 log.go:172] http: TLS handshake error from x.x.x.x:43545: read tcp .x.x.x.x:6443->x.x.x.x:43545: read: connection reset by peer
所以在lvs上的健康检测要使用ssl_get来搞
SSL_GET {
url {
path /healthz
status_code 200
}
connect_timeout 3
nb_get_retry 3
delay_before_retry 3
connect_port 6443
}
所有评论(0)