From 9fb891b963eff099fec6e1cc3375c43cb778925b Mon Sep 17 00:00:00 2001 From: eddytruyen Date: Sun, 24 Sep 2017 00:45:38 +0200 Subject: [PATCH] Update create-cluster-kubeadm.md --- docs/setup/independent/create-cluster-kubeadm.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/docs/setup/independent/create-cluster-kubeadm.md b/docs/setup/independent/create-cluster-kubeadm.md index fbcf5b975b..4f7c18f56f 100644 --- a/docs/setup/independent/create-cluster-kubeadm.md +++ b/docs/setup/independent/create-cluster-kubeadm.md @@ -547,6 +547,12 @@ You may have trouble in the configuration if you see Pod statuses like `RunConta If not, you may still use the [NodePort feature of services](/docs/concepts/services-networking/service/#type-nodeport) or use `HostNetwork=true`. + +1. **Pods cannot access themselves via their Service IP** + Many network add-ons do not yet enable [hairpin mode](https://kubernetes.io/docs/tasks/debug-application-cluster/debug-service/#a-pod-cannot-reach-itself-via-service-ip) + which allows pods to access themselves via their Service IP if they don't know about their podIP. This is an issue + related to [CNI](https://github.com/containernetworking/cni/issues/476). Please contact the providers of the network + add-on providers to get timely information about whether they support hairpin mode. 1. If you are using VirtualBox (directly or via Vagrant), you will need to ensure that `hostname -i` returns a routable IP address (i.e. one on the @@ -608,10 +614,6 @@ kubectl -n ${NAMESPACE} describe pod ${POD_NAME} kubectl -n ${NAMESPACE} logs ${POD_NAME} -c ${CONTAINER_NAME} ``` -1. Many CNI-based network add-ons do not set [hairpin mode](https://kubernetes.io/docs/tasks/debug-application-cluster/debug-service/#a-pod-cannot-reach-itself-via-service-ip) which allows pods to access -themselves via their Service IP if they don't know about their podIP. Please consult issue [containernetworking/cni#476](https://github.com/containernetworking/cni/issues/476) -for more up-to-date information or directly contact the providers of the network add-on providers to get -timely information about whether they support hairpin mode. {% endcapture %}