how to config the 443 port

[onlywyn]

我的pod信息
[root@node21 .kube]# kgetpod
NAME READY STATUS RESTARTS AGE IP NODE
calico-node-nf4d5 1/2 Running 33 1h 2.2.2.24 node24
calico-node-q98st 1/2 CrashLoopBackOff 30 1h 2.2.2.21 node21
calico-node-rk66c 1/2 Running 30 1h 2.2.2.23 node23
calico-node-v2hk4 1/2 Running 30 1h 2.2.2.22 node22
calico-node-z8chx 1/2 CrashLoopBackOff 33 1h 2.2.2.25 node25
coredns-859d584858-r8h5q 0/1 ContainerCreating 0 4m node25
coredns-859d584858-rhm7n 0/1 ContainerCreating 0 4m node25
etcd-node21 1/1 Running 3 4h 2.2.2.21 node21
etcd-node22 1/1 Running 3 2h 2.2.2.22 node22
etcd-node23 1/1 Running 3 2h 2.2.2.23 node23
kube-apiserver-node21 1/1 Running 4 4h 2.2.2.21 node21
kube-apiserver-node22 1/1 Running 3 2h 2.2.2.22 node22
kube-apiserver-node23 1/1 Running 3 2h 2.2.2.23 node23
kube-controller-manager-node21 1/1 Running 4 4h 2.2.2.21 node21
kube-controller-manager-node22 1/1 Running 3 2h 2.2.2.22 node22
kube-controller-manager-node23 1/1 Running 3 2h 2.2.2.23 node23

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
kubectl -n kube-system logs -c calico-node -f calico-node-q98st
2018-08-11 09:54:03.932 [INFO][8] startup.go 251: Early log level set to info
2018-08-11 09:54:03.932 [INFO][8] startup.go 267: Using NODENAME environment for node name
2018-08-11 09:54:03.932 [INFO][8] startup.go 279: Determined node name: node21
2018-08-11 09:54:03.934 [INFO][8] startup.go 302: Checking datastore connection
2018-08-11 09:54:24.940 [INFO][8] startup.go 317: Hit error connecting to datastore - retry error=Get https://10.96.0.1:443/api/v1/nodes/foo: dial tcp 10.96.0.1:443: getsockopt: connection refused
2018-08-11 09:54:46.946 [INFO][8] startup.go 317: Hit error connecting to datastore - retry error=Get https://10.96.0.1:443/api/v1/nodes/foo: dial tcp 10.96.0.1:443: getsockopt: connection refused
2018-08-11 09:55:08.951 [INFO][8] startup.go 317: Hit error connecting to datastore - retry error=Get https://10.96.0.1:443/api/v1/nodes/foo: dial tcp 10.96.0.1:443: getsockopt: connection refused
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[root@node21 .kube]# kgetservice
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
calico-typha ClusterIP 10.102.250.184 5473/TCP 1h
kube-dns ClusterIP 10.96.0.10 53/UDP,53/TCP,9153/TCP 1h
[root@node21 .kube]# nt 443
tcp 0 0 0.0.0.0:6443 0.0.0.0:* LISTEN 2712/haproxy
tcp 0 0 2.2.2.21:5443 2.2.2.21:54674 SYN_RECV -
tcp 0 0 2.2.2.21:5443 2.2.2.22:57918 SYN_RECV -
tcp 0 0 2.2.2.21:5443 2.2.2.23:55790 SYN_RECV -
tcp 0 0 2.2.2.21:37654 2.2.2.20:6443 ESTABLISHED 2730/kube-controlle
tcp 0 0 2.2.2.21:37618 2.2.2.20:6443 ESTABLISHED 2792/kube-scheduler
tcp 0 0 2.2.2.21:37594 2.2.2.20:6443 ESTABLISHED 1102/kubelet
tcp 0 0 2.2.2.21:37866 2.2.2.20:6443 ESTABLISHED 3036/kube-proxy
tcp 0 0 127.0.0.1:34730 127.0.0.1:5443 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 :::5443 :::* LISTEN 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42358 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42382 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42500 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42284 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42544 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42230 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 127.0.0.1:5443 127.0.0.1:34730 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42290 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:42254 ESTABLISHED 2669/kube-apiserver
tcp6 0 0 2.2.2.21:5443 2.2.2.23:55646 ESTABLISHED 2669/kube-apiserver