NgnZ2L0OqiMQIpG5LCfWWorker kubelet unable to update master
Worker kubelet unable to update master
Gets the master instance IP addresses in the cluster and uses it to perform connectivity checks.
inputs
outputs
for node in no_status_nodes:
nodeip = node['nodeip']
cmd = "sudo systemctl status kubelet"
op = _exe(nodeip, cmd)
#_problem = False
if "Unable to register node with API server" in op:
pass
master_ip_addr = _get_ip_addr(master_ip)
cmd1 = f'aws ec2 describe-instances --filters "Name=ip-address,Values={master_ip_addr}" --query "Reservations[*].Instances[*].InstanceId" --output text'
master_instance_ids = [_exe(None, cmd1).strip()]
print(master_instance_ids)
copied- 1xSYmJ2ECr0PZ9k9aTbFvSecurity group blocked the API request
1
Looks at the security groups of the master instances (by their IDs) to check if there are possible port configuration mismatches preventing connectivity.
inputsoutputsimport json for instance_id in master_instance_ids: _problem = True cmd = f"aws ec2 describe-instances --instance-ids {instance_id} --query 'Reservations[*].Instances[*].SecurityGroups[*].GroupId' --output=text" sg_ids1 = _exe(None, cmd) print(sg_ids1) sg_ids = re.split('\s',sg_ids1.strip()) if sg_ids: for sg_id in sg_ids: if not sg_id: continue cmd1 = 'aws ec2 describe-security-groups --filter Name=group-id,Values=' cmd1+= sg_id cmd1+= ' --query SecurityGroups[*].IpPermissions[*]' op = _exe(None, cmd1) json_op = json.loads(op) for sg in json_op: for rule in sg: if 'FromPort' in rule: port_lo = int(rule['FromPort']) port_hi = port_lo if 'ToPort' in rule: port_hi = int(rule['ToPort']) if port >= port_lo and port <= port_hi: _problem = False else: continue if _problem: break if _problem: context.log("ERROR", "Found problem")copied1